Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: E5dnqyT2q7IqwiW2lZ+74g2ou0EeEIgaAQLwVGayNY4=
Subject key identifier: 68:FD:BA:7F:75:38:F7:E5:94:D2:F5:8B:C2:D0:EF:14:5F:06:B1:56
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01987DC0A87DA26259E199642E33AC1F417D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 05:00:34 +0000
Manifest this update: Wed 06 Aug 2025 05:00:34 +0000
Manifest next update: Thu 07 Aug 2025 05:00:34 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: 1Si/Z2cvEDCndKH9JQtIg+rUeKp8mw/97eDxMCVTQYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:a8:7d:a2:62:59:e1:99:64:2e:33:ac:1f:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Aug 6 05:00:34 2025 GMT
Not After : Aug 7 05:00:34 2025 GMT
Subject: CN=68fdba7f7538f7e594d2f58bc2d0ef145f06b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:60:76:ec:4d:6e:18:16:71:4a:aa:37:cf:
2e:c5:7e:15:4b:12:3e:41:0e:23:70:41:4f:13:91:
33:fc:57:b3:49:28:21:cd:69:be:a8:82:0a:d6:c3:
20:4e:38:0a:a4:70:83:7d:88:7c:8c:b4:b5:49:3b:
da:1c:28:a9:0c:45:5c:98:83:60:b4:a3:a5:09:75:
08:2d:b2:ce:ea:8e:46:61:d6:78:fd:c8:98:a7:2e:
a3:c8:b3:a1:f8:86:0d:37:72:3d:5f:b4:79:7b:68:
66:b3:99:a8:84:eb:d7:28:f1:47:5d:94:26:3f:30:
60:a1:d5:a3:59:3e:1c:39:19:f7:11:ae:27:4e:d9:
00:f7:fe:5c:33:9a:32:5f:2c:de:d1:49:e2:c4:cd:
45:c1:f0:02:a6:cc:ec:2d:ba:1a:2e:9f:c8:62:6f:
ac:99:ed:6f:82:82:08:87:03:7d:43:20:eb:dc:61:
48:fd:2b:a3:d2:3e:69:d5:d9:e1:86:95:49:41:af:
ae:05:24:9a:e2:d2:1a:c8:2c:66:f1:7a:c7:50:ae:
a2:5c:e8:c6:ba:20:32:5b:4f:b3:82:e7:91:89:dd:
2d:35:2e:a6:a5:42:6a:34:46:71:f4:2e:ca:67:67:
07:0e:01:6f:28:82:09:d2:e3:a6:db:f0:5f:5e:df:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:BA:7F:75:38:F7:E5:94:D2:F5:8B:C2:D0:EF:14:5F:06:B1:56
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:2b:13:cb:41:38:fe:a9:dc:11:4f:f4:fc:22:d5:38:89:
66:8d:7f:8c:49:ea:39:3f:a9:c4:ce:85:bb:a0:ae:76:c0:df:
cc:c8:36:2a:63:24:25:7c:68:31:d3:2d:5c:ed:a6:26:12:5a:
1e:56:c5:31:01:c0:7a:48:c7:41:eb:eb:49:ac:89:3b:49:e2:
4a:5d:70:e3:ff:e8:3b:86:79:2f:8a:c4:42:b7:3c:e4:a7:e1:
cb:47:e6:ef:03:36:55:4b:71:50:0e:b8:25:75:e5:12:6e:2d:
80:73:5e:35:0a:8e:31:06:e0:f7:ea:67:3c:82:64:a0:12:6b:
d5:b3:9e:31:ae:e2:1a:c0:2b:e2:47:0a:c3:52:f3:72:e9:00:
75:c0:48:e1:2e:91:83:d2:13:c4:7d:da:b7:c4:4f:e2:43:18:
e1:f8:a3:88:56:0f:28:22:82:bf:eb:07:af:9b:52:76:56:21:
10:5f:43:b8:bc:9a:4e:37:7d:bd:09:14:00:d6:73:06:c3:3e:
6b:4f:0c:bd:6e:1b:65:93:19:e0:11:ba:22:00:8e:48:c0:40:
a2:16:14:53:39:f7:52:54:aa:08:5f:07:72:51:f8:a4:1c:34:
da:a2:0e:bc:e6:49:c5:13:da:28:07:c2:1e:7a:77:7d:3e:33:
70:9c:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:32:10 2025 by rpki-client