Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: bcI30Ta148Mc6BmQY6ts6drkPRX6CSOWsmqUaW9yQnQ=
Subject key identifier: 75:4B:2A:5C:12:9C:AA:4C:B2:5D:48:48:FD:F6:54:53:6E:ED:4F:7D
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019872CFEB024E59B6D52D82732AD39F9BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:25 +0000
Manifest this update: Mon 04 Aug 2025 02:01:25 +0000
Manifest next update: Tue 05 Aug 2025 02:01:25 +0000
Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: QzZ5tggA7NrPff3NVL0qzv+DjgCpbMxq2QIVi+fBRxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:eb:02:4e:59:b6:d5:2d:82:73:2a:d3:9f:9b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Aug 4 02:01:25 2025 GMT
Not After : Aug 5 02:01:25 2025 GMT
Subject: CN=754b2a5c129caa4cb25d4848fdf654536eed4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:d0:86:e0:99:a8:74:78:0b:ff:18:1b:a2:
8c:23:1b:99:52:25:86:f2:10:61:13:84:a9:55:7d:
06:98:e9:e0:50:be:fc:85:e5:f3:0d:86:48:43:10:
e2:26:e5:92:94:a7:cb:07:f0:bd:d3:33:9b:3a:85:
55:86:25:fd:57:a5:9b:2b:3c:1c:74:23:15:b2:dc:
45:ae:0d:12:cc:2e:44:48:67:fe:25:a1:2c:f6:fb:
92:a7:63:da:85:0c:a2:22:e7:90:fa:7d:75:26:02:
22:00:c9:58:ca:de:7c:f5:19:ee:e2:51:b6:ce:4f:
d6:cd:b3:cf:18:f6:97:7a:ee:2e:11:97:52:9f:1f:
e8:f2:08:4b:b5:b6:72:e8:8e:39:6d:1b:84:7e:e2:
e9:41:86:7c:91:1f:5f:d6:3c:5b:cc:ba:74:9e:3a:
30:aa:d0:c1:13:ed:15:84:0b:a4:81:ee:f0:f6:44:
c8:fe:2d:4e:57:db:02:72:76:2d:3b:61:9b:53:bc:
34:70:86:21:d7:7b:2d:77:5a:1a:ea:14:b4:c5:56:
f2:60:e1:33:ce:49:60:8b:8e:20:e9:15:d0:b8:c5:
bd:ec:35:86:d4:4f:33:57:52:3f:d9:6b:8d:63:a0:
06:21:29:06:3c:05:99:31:5e:56:c3:7e:d9:a6:aa:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:2A:5C:12:9C:AA:4C:B2:5D:48:48:FD:F6:54:53:6E:ED:4F:7D
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:10:b1:04:98:83:6a:69:7c:76:fd:1a:61:f8:f9:d8:f0:
38:5a:b0:3a:f2:38:a9:15:fc:56:b6:73:46:fe:fc:8e:ea:a1:
39:63:63:71:39:5d:cd:4a:61:87:ab:1e:d5:fe:f4:44:e2:1d:
4c:39:e3:28:f3:c3:9f:60:ca:6c:d8:72:8e:ba:e4:bc:1d:7e:
04:3d:04:a1:2c:3c:6a:bb:af:e1:28:1b:15:84:3e:c3:07:74:
5c:e2:d8:69:30:a4:f1:1e:dd:d5:7d:42:c2:43:bc:23:f8:e8:
75:3c:d8:fb:c7:6d:44:bc:67:42:df:3a:e4:85:56:f7:a2:a3:
13:7a:58:88:e2:26:25:dd:18:d9:a1:5a:5b:ae:c9:a3:88:36:
92:bc:94:c8:95:bf:b8:7f:00:80:cc:e7:f0:49:67:da:eb:b3:
40:65:63:65:ba:1b:11:d6:70:cd:42:8b:86:0e:ae:1e:3a:cc:
95:eb:cc:af:d0:8b:db:3c:0d:94:a2:7f:db:01:19:9c:0e:a4:
98:11:3f:d0:70:ef:3b:58:02:e4:95:e0:f9:19:4b:d2:7d:01:
6c:9f:fb:6c:7e:a6:6e:8f:1a:3b:1a:d0:91:64:5b:59:50:f3:
a7:1c:a2:9d:be:cf:9c:bc:db:52:7a:63:37:01:66:03:f0:7a:
1c:37:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:17 2025 by rpki-client