Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: PJ35R4WJAs/iyLC+1+RrdTP29j2aBRUTT5j/OxZNuto=
Subject key identifier: 3D:A2:EB:ED:FC:B5:EE:45:A2:35:76:44:56:00:32:48:8E:56:78:6E
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019874505D86EF060860ACBC9E833903041C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0A0B
Signing time: Mon 04 Aug 2025 09:01:20 +0000
Manifest this update: Mon 04 Aug 2025 09:01:20 +0000
Manifest next update: Tue 05 Aug 2025 09:01:20 +0000
Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: SONGYF8oeKmaCtzpaGQJyKX9IIeEosppHdsK2Oftz3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5d:86:ef:06:08:60:ac:bc:9e:83:39:03:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Aug 4 09:01:20 2025 GMT
Not After : Aug 5 09:01:20 2025 GMT
Subject: CN=3da2ebedfcb5ee45a2357644560032488e56786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:ff:49:59:d9:da:02:ba:01:79:14:d0:80:
24:5f:97:2a:21:54:e2:0c:75:67:93:33:d1:fc:a3:
6b:d8:35:b1:ea:ed:2d:57:53:b8:f7:6c:b2:84:60:
8d:05:bd:c1:4a:ff:ef:63:b5:94:62:70:78:44:03:
c6:26:48:b9:b0:89:04:5b:1e:26:bc:f9:0e:21:30:
db:e8:fc:44:e0:c4:fa:3b:7e:6a:61:5e:1a:fd:50:
7a:41:02:74:b5:07:ae:10:c9:f7:3e:32:e1:e8:bd:
a3:aa:72:3b:68:96:73:cc:83:33:d9:7a:28:ee:38:
a8:8f:a1:7a:ed:b3:f3:1a:45:11:d9:30:77:eb:63:
c9:ef:04:0a:fb:7a:ab:cc:29:96:e0:1d:10:3a:60:
fa:5d:f9:94:46:4f:1c:60:86:b7:a8:54:a2:47:58:
06:95:8c:c1:4a:a6:1f:0b:2e:39:a1:0f:ef:7f:d1:
8e:f9:e4:30:8d:5f:3d:29:0c:d1:75:e6:3e:98:06:
f3:74:ca:e9:ad:06:cc:04:94:84:48:ca:86:38:fc:
f7:f5:39:c9:b1:f4:64:fb:26:be:2b:05:0b:d8:26:
b8:65:7a:5a:89:1b:42:2f:85:9f:e7:c9:04:7c:bd:
a6:40:ee:c3:8f:a7:ea:b3:91:4b:87:1c:32:c6:17:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:EB:ED:FC:B5:EE:45:A2:35:76:44:56:00:32:48:8E:56:78:6E
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:41:b1:e4:c9:2d:4a:7b:ac:c7:af:60:7d:87:6b:d3:d9:
fe:68:d2:5e:ca:50:97:ce:bf:f9:ad:f0:a1:cc:1a:ba:9c:b9:
8d:38:5b:f4:57:8b:0f:4c:39:62:b5:bf:fa:6b:ca:d3:b3:2b:
d1:f0:d2:7d:c8:3c:4c:0e:71:64:34:f6:c8:67:94:27:91:4c:
8f:b0:65:49:6a:1b:95:72:97:45:53:a2:a5:23:7c:da:c7:ed:
23:54:33:25:41:a5:6f:67:1e:55:90:a0:3f:7a:8d:34:37:0b:
1a:f8:9d:16:1d:63:c8:c4:80:b6:70:02:39:d2:93:db:b8:cd:
6f:f8:09:b0:61:38:3f:44:a2:25:5e:dd:c9:be:5b:2c:6d:4d:
56:29:e7:55:b3:42:15:51:3e:84:87:f2:99:09:a0:56:25:b1:
c2:90:df:0f:1a:c9:48:fa:48:0a:7c:2b:24:47:02:c5:94:f0:
73:8f:dd:98:59:d8:c5:ce:27:07:24:0b:0a:80:92:4d:5f:79:
67:24:c0:28:25:8c:77:0f:63:36:29:e6:bf:31:51:a3:e0:b8:
a4:c1:9b:ac:8c:36:06:d6:28:ec:f8:70:62:b8:a4:65:84:4a:
91:0b:9c:72:d2:3d:6d:4a:6b:78:6c:d9:bd:a2:eb:4a:91:82:
59:bf:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:00 2025 by rpki-client