Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: 6n6Gc3YvisHwYJ+KEvKYEBIJmCKwMmcHqGH7vpoe7uw=
Subject key identifier: EE:50:99:ED:FD:26:AD:1B:9B:8C:35:8F:E0:35:F9:3D:FE:4F:AD:16
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 01988AA079793296EC2F9BA5E118E10D281A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 10C4
Signing time: Fri 08 Aug 2025 17:00:29 +0000
Manifest this update: Fri 08 Aug 2025 17:00:29 +0000
Manifest next update: Sat 09 Aug 2025 17:00:29 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: HaHrEutwUF9MAXjazpTQEA++FSuOqNfiI5UCP9qjrs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:79:79:32:96:ec:2f:9b:a5:e1:18:e1:0d:28:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Aug 8 17:00:29 2025 GMT
Not After : Aug 9 17:00:29 2025 GMT
Subject: CN=ee5099edfd26ad1b9b8c358fe035f93dfe4fad16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:31:ba:08:0f:db:1c:2b:28:fc:61:95:70:
cf:f2:70:64:b1:f9:07:42:08:bc:4a:0d:ec:bf:cc:
8e:00:b1:c1:dd:2b:6d:56:e6:91:b4:b7:87:51:3e:
68:89:91:b2:dc:9e:70:32:30:11:c2:ff:a7:49:88:
4c:29:50:ad:f0:b2:66:e0:f2:0f:3b:18:79:42:29:
32:68:69:fe:63:ff:e4:0b:bc:50:b7:ed:a6:23:39:
76:a4:01:d6:26:65:73:f7:24:07:51:87:bd:47:e6:
16:22:ab:90:ca:0f:84:d5:f3:1b:11:8f:4b:9d:82:
94:8c:b1:27:23:27:b2:fd:fc:09:06:fa:c6:12:fc:
b2:9e:77:1b:65:21:04:34:90:00:ec:56:a2:b4:41:
f6:f7:27:fd:6b:f7:49:95:d0:c7:66:af:f6:63:08:
d7:96:2c:92:75:b7:c0:40:1c:2f:e3:96:e9:70:82:
ec:b2:0f:04:44:e6:4a:75:97:f4:33:9d:d1:08:94:
f7:e0:df:e2:37:96:9f:f9:aa:50:b6:98:00:15:0f:
39:c5:89:bc:f9:de:6e:27:5d:b4:a0:a5:8e:d5:05:
57:b7:23:6e:dd:a5:ac:84:04:63:94:ea:b0:79:67:
1a:01:ce:4e:f8:58:cb:34:8f:25:5a:f4:30:00:b2:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:99:ED:FD:26:AD:1B:9B:8C:35:8F:E0:35:F9:3D:FE:4F:AD:16
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7a:43:1e:47:db:7c:c4:74:cd:54:a1:ec:7a:2e:b0:2b:04:
64:70:e7:6b:a3:7c:82:c5:3e:bd:7c:0f:05:96:1b:80:aa:4d:
04:b6:90:75:e3:4a:31:be:f9:f6:b1:3d:3d:18:fd:da:c0:7e:
d7:7c:14:99:13:19:a0:b3:40:06:43:ad:92:19:11:b8:e9:84:
a1:03:ac:4d:34:a2:e8:71:a4:f6:1e:af:6d:34:f7:34:a3:db:
b8:c1:54:2c:9a:8a:e3:04:97:51:99:ff:d5:63:92:32:12:92:
0e:c6:f8:8c:ac:95:bf:b5:8f:f9:ed:5c:48:f8:ad:f8:44:20:
a4:0b:19:e2:d8:43:89:31:14:a2:2e:96:5b:de:d9:cb:f2:45:
05:2e:1a:f1:44:1c:40:5e:78:ec:52:08:7c:c7:2a:97:24:49:
5e:c9:1a:55:5a:39:df:ff:ce:b3:12:94:f0:d5:d9:da:c8:28:
8d:87:2c:20:82:5d:aa:6c:bf:d5:80:c4:f9:07:75:1e:72:11:
94:1f:90:e5:77:71:94:40:d3:33:ee:fe:bd:62:e9:ee:bd:60:
37:f1:b4:24:31:80:16:f9:fb:4c:e9:d0:d5:c2:c7:46:2a:3e:
fb:9f:08:cb:ef:a8:ed:5f:58:24:de:f2:f6:fc:28:c7:86:13:
14:a1:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:37 2025 by rpki-client