Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: ivT1uMdkQf5aiyHj1FCY31EsoGNa6HCaosU4ujHJtQY=
Subject key identifier: 0F:0F:E7:A8:95:59:C2:ED:70:16:D0:6E:69:30:69:26:50:59:F6:89
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01987AC0229452C9A8B9FC5D64C3A7172525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 15:01:08 +0000
Manifest this update: Tue 05 Aug 2025 15:01:08 +0000
Manifest next update: Wed 06 Aug 2025 15:01:08 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: 9CPGF2Ea9kpmFJnNmLEm7/6iDTrLPnG3QprTuCrfWqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:22:94:52:c9:a8:b9:fc:5d:64:c3:a7:17:25:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Aug 5 15:01:08 2025 GMT
Not After : Aug 6 15:01:08 2025 GMT
Subject: CN=0f0fe7a89559c2ed7016d06e693069265059f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:36:9a:74:4a:86:1e:7e:77:e8:cf:ea:8f:
21:b6:5c:a0:88:52:d5:f1:58:86:9b:c8:cf:d1:76:
e8:6d:b6:63:4e:cc:f2:20:5a:54:63:1d:10:34:fe:
e5:40:b1:c0:f1:c7:97:91:18:b0:70:f3:e3:88:f6:
0d:f1:7d:dd:84:c8:b0:de:1b:2e:13:8d:3f:82:29:
c4:ee:fa:16:22:19:f7:de:62:65:d3:f5:59:21:22:
25:94:57:1d:86:c6:7b:a2:3e:b6:21:93:10:5a:c4:
9b:54:40:5f:95:61:41:2f:7a:b8:63:f5:35:b9:7b:
9f:01:b0:0d:e4:5b:d7:2e:02:09:52:c5:c5:70:d8:
58:06:72:78:23:3a:c2:41:a1:4b:c2:98:ad:75:15:
47:0e:88:18:16:33:70:ab:9f:03:ca:4d:d3:15:c1:
5f:ea:5d:4a:0d:a1:9b:6c:17:e9:b8:0d:0a:1b:b9:
75:be:40:76:e4:71:cf:8b:e5:e1:a2:d5:b9:56:ba:
07:0b:53:e0:04:2e:29:52:51:34:31:08:12:40:0b:
69:e0:80:96:d5:91:74:b5:44:9c:05:01:13:b3:90:
05:92:4c:37:26:5c:fb:7a:ae:51:24:82:86:60:44:
18:b7:a6:77:49:24:79:2d:60:bc:b7:e1:64:a6:13:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:E7:A8:95:59:C2:ED:70:16:D0:6E:69:30:69:26:50:59:F6:89
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:f1:03:4f:34:48:f8:1b:bf:97:83:3a:76:e6:d0:ce:c6:
06:d2:80:fc:68:0e:ec:02:e2:42:ad:87:02:0d:31:41:64:43:
b5:ef:a3:14:20:18:59:47:94:cc:9f:4f:14:e2:11:5b:a7:5b:
90:17:df:58:03:4a:e2:80:c9:66:a8:2f:24:a6:b7:dd:38:5d:
cf:0d:32:07:19:5c:d6:7a:b6:d1:a8:cf:a1:52:f8:dd:82:dd:
f1:e0:51:d9:3f:bf:b7:87:95:f4:ce:74:63:66:c2:1f:a2:40:
9f:26:88:af:89:0b:ed:0a:73:72:fc:7d:05:b1:be:9e:e3:db:
d9:5f:89:94:51:66:61:c7:93:5c:51:8c:04:46:2b:7e:09:90:
56:9f:7a:3b:37:98:cd:3f:05:83:29:30:3a:e7:13:c7:88:39:
a2:f1:f6:7a:11:9d:b5:69:3f:e7:95:ae:e1:e5:87:1c:62:42:
7e:6b:23:49:f6:07:72:e8:59:5f:74:eb:8c:ab:5e:c5:56:b3:
9f:bc:ef:4f:87:5c:b1:d2:7a:5e:bb:09:08:5f:04:1c:42:48:
21:f8:60:ee:ec:26:74:f6:2f:3a:1f:f3:58:26:79:ae:37:d5:
13:8b:a3:ef:27:a8:5c:ca:5c:1a:4c:35:da:0e:c5:ab:86:bd:
34:80:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:56 2025 by rpki-client