Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: DRZcTSOGadlQZ0+h1mcco7BrOyCpEfsmQEJ0kJ9Gm0I=
Subject key identifier: 34:2E:A6:E1:A1:1E:70:87:F5:7D:21:3A:61:6C:E5:DE:AE:6D:52:96
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 019874BE6DE11CF9DAF79E3AEAD56FBA96CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:01:33 +0000
Manifest this update: Mon 04 Aug 2025 11:01:33 +0000
Manifest next update: Tue 05 Aug 2025 11:01:33 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: OM7KYKF/UHpVVRcFErKWyWPHg2N9sYJqSFBlS1jA/XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:6d:e1:1c:f9:da:f7:9e:3a:ea:d5:6f:ba:96:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Aug 4 11:01:33 2025 GMT
Not After : Aug 5 11:01:33 2025 GMT
Subject: CN=342ea6e1a11e7087f57d213a616ce5deae6d5296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:4f:d4:d8:c6:fd:3a:e0:0b:7e:ac:08:de:
5b:da:9c:ca:06:33:1f:a1:46:8a:28:bd:f7:9b:b4:
b5:26:f4:09:e9:e0:b7:7f:a0:82:2c:f3:ba:be:7c:
12:61:e3:9d:8e:c9:26:d7:d2:34:b8:44:44:3e:72:
59:0c:a8:9d:e2:f2:c3:2d:96:09:e0:99:8a:49:34:
e7:23:81:17:dd:ac:fe:27:ed:96:25:03:f4:8b:97:
0e:f0:94:df:b0:47:7e:57:2e:e8:52:e0:bc:e0:6e:
bd:b4:92:4f:5b:a7:20:6b:2c:63:45:c2:53:d8:17:
79:e1:61:ce:c5:d4:d7:a4:d8:35:9b:74:d0:2a:c5:
b9:6a:b2:df:ad:d0:ab:d7:ac:96:94:84:b9:5a:c4:
0a:e2:6f:09:45:ad:a6:39:35:d0:64:bb:83:a4:ed:
47:84:8c:a3:79:9c:01:2d:4e:31:33:27:19:ce:8e:
05:2a:ec:ca:d2:f3:6f:a5:03:ce:82:5a:03:23:5e:
cc:9c:4a:6b:f0:33:99:fe:b6:94:05:02:96:d4:67:
80:be:b7:e3:dc:9c:ea:dc:9a:86:31:36:d7:12:f2:
23:90:69:30:86:f4:e0:f4:c3:61:f4:9c:2f:56:3d:
08:e9:dc:f2:a4:9b:20:6e:e1:49:53:f5:33:c3:15:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:A6:E1:A1:1E:70:87:F5:7D:21:3A:61:6C:E5:DE:AE:6D:52:96
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:4d:52:03:05:d7:e5:bb:70:30:6e:2a:4d:b1:09:70:9c:
b0:81:53:c9:c7:6e:27:1d:78:58:dc:dd:a0:63:9b:0e:98:da:
15:82:2d:51:7a:c0:76:65:d2:9d:04:78:3c:3a:df:33:bb:d8:
3d:a0:86:81:58:23:55:5c:1d:58:3a:15:57:0e:31:43:90:37:
95:18:66:2d:98:3a:b1:62:35:cb:0d:d4:81:ce:01:ec:25:92:
6c:3f:f7:69:d2:04:01:f6:62:78:52:f7:43:3f:53:82:ef:74:
93:c9:d5:4b:4f:1d:76:22:10:37:82:32:51:e4:5b:5a:50:8e:
49:8b:09:72:2b:7b:c3:c1:f7:dd:df:58:58:cc:f2:92:3b:16:
f9:29:0c:19:b9:40:80:da:91:8d:e2:85:bf:8f:dc:04:7f:62:
cb:83:f7:11:6d:c8:96:5c:3b:8f:47:70:16:41:a0:a7:c3:d6:
65:2a:9a:c1:32:c8:da:b7:61:ed:69:f3:17:4d:a8:95:0c:d2:
73:c0:6a:30:63:13:fa:ec:85:51:da:da:54:fa:47:30:2f:ef:
30:08:28:0a:90:83:15:bd:85:b9:a1:b3:7b:29:48:4e:d7:bc:
d3:5f:20:15:37:c4:af:a4:63:bc:fd:a9:7b:d8:87:b2:ba:32:
0e:2f:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:21 2025 by rpki-client