Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: cLMv6gekzuPShR1zvKrGU7e35sDSDYIE/6U4VFvmkRo=
Subject key identifier: EA:42:E8:88:24:2D:1C:96:E9:51:7D:EB:2F:ED:A1:17:FD:A6:B0:D6
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019874F4F1C7C70C0A697FA3381D8A141CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 12:01:06 +0000
Manifest this update: Mon 04 Aug 2025 12:01:06 +0000
Manifest next update: Tue 05 Aug 2025 12:01:06 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: oAxRmpxYTo0oDy0zgin2bI4Y20xOcXBJ9oVD1FNozcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f1:c7:c7:0c:0a:69:7f:a3:38:1d:8a:14:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Aug 4 12:01:06 2025 GMT
Not After : Aug 5 12:01:06 2025 GMT
Subject: CN=ea42e888242d1c96e9517deb2feda117fda6b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:cc:f3:77:e4:60:54:c5:ef:0d:b4:10:7b:
be:3a:91:d7:ee:83:12:47:c6:45:e7:ba:90:42:79:
2d:b5:ec:c2:c4:11:d6:60:44:9e:c3:84:ca:43:d3:
d8:e5:22:fe:d3:57:63:d7:cd:84:43:23:4a:df:3e:
5b:f1:ba:6d:68:c4:cc:b8:5c:03:b6:bc:dc:97:f5:
57:d4:02:b4:81:c3:e5:ff:ef:37:a9:87:b7:f3:ef:
a7:e5:ee:60:55:df:7c:ef:ba:83:a3:1f:15:81:ad:
36:10:18:ca:85:f5:40:8b:dc:c8:b9:5e:e9:2c:cb:
1a:96:53:6b:3d:77:04:c0:e7:2c:54:c6:b0:f4:f1:
60:29:1f:1a:d9:4a:08:2b:8d:81:ab:c7:57:8d:3a:
41:09:6a:2e:51:16:a9:73:c9:28:e1:db:fe:10:8e:
34:a2:9a:c5:5f:54:1e:03:d3:51:98:9c:fe:c6:8c:
c3:77:fd:3a:8e:48:0b:ba:54:2e:8c:f1:e4:d6:53:
91:8a:58:0f:0a:f7:bb:04:d1:0c:f7:54:7c:c5:49:
ff:3a:cf:e4:8d:b5:f7:82:3b:75:25:a7:c5:75:f0:
a9:a3:1d:6c:90:42:76:48:90:39:5b:4e:d6:5e:34:
d6:2a:2a:f1:5e:ba:22:1d:67:9c:b2:a0:e5:f2:c2:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:E8:88:24:2D:1C:96:E9:51:7D:EB:2F:ED:A1:17:FD:A6:B0:D6
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:ba:61:3d:f5:82:e4:b3:d1:fb:90:97:10:8c:ef:e5:29:
68:0e:31:c2:ad:2b:fe:38:b9:95:ac:ac:52:15:d7:ed:fa:c1:
bd:0c:bd:3f:8b:87:1c:f0:b8:ee:43:34:57:18:f9:8d:6c:a2:
a7:d4:1f:45:2a:c6:34:c9:0b:24:94:5c:32:0b:50:ae:0f:4a:
6d:20:cd:e8:91:9d:7b:3d:7a:0a:e2:ce:f8:79:6b:b9:6b:51:
0e:61:54:f8:94:5e:0c:62:77:66:ad:4b:3c:2b:dd:87:a1:76:
a4:3d:65:f7:66:36:f8:c5:0b:ea:f5:52:50:d9:b7:8c:43:cd:
e7:4d:88:60:ed:dd:41:4f:18:62:d6:de:dd:48:55:e2:7b:5f:
65:b1:85:86:38:53:b4:7b:62:3d:58:fc:d0:45:5c:32:cd:21:
5e:65:4c:63:6f:45:77:cd:93:b0:cf:45:0b:0a:eb:c4:34:c9:
33:35:c5:ac:c6:93:ff:bb:92:38:a2:e4:ce:75:40:47:a9:0a:
01:12:f7:45:85:bc:ed:9c:13:61:a5:4c:79:c2:cb:94:b5:02:
dd:ab:74:d0:5e:8b:eb:07:39:ab:61:99:a1:fb:94:a9:d6:63:
80:cd:4d:df:82:cc:d6:d9:c1:26:e8:d0:b4:17:7d:e2:65:3f:
4e:5b:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:26 2025 by rpki-client