Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: /sHFXJn89DPbV1/MXDE8ae7+8PZvp0nzynl1/Ud9s94=
Subject key identifier: 40:A4:78:4E:59:F7:77:43:CC:A3:20:95:E3:35:00:18:99:53:C7:1A
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019873E3152610A9B2D0862149A4AC428552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:58 +0000
Manifest this update: Mon 04 Aug 2025 07:01:58 +0000
Manifest next update: Tue 05 Aug 2025 07:01:58 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: YBbT7jIHFLqwWRofpD0t8JkwATc3zStl7BJqODiUY04=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:15:26:10:a9:b2:d0:86:21:49:a4:ac:42:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Aug 4 07:01:58 2025 GMT
Not After : Aug 5 07:01:58 2025 GMT
Subject: CN=40a4784e59f77743cca32095e33500189953c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:96:82:b3:d9:46:18:08:4f:c9:b9:fd:7a:
5b:4c:cb:66:e1:70:61:d7:dd:fa:01:10:20:ac:66:
4c:48:f3:2b:d7:02:38:88:fc:3c:65:e4:49:2f:2f:
11:05:5f:c9:50:8f:43:c2:16:3e:69:24:8f:fb:14:
04:51:11:87:25:1e:e8:1a:f1:ba:88:25:bd:59:d5:
f9:2b:70:df:9e:6c:20:fd:92:0f:dd:ca:29:95:45:
04:1a:c8:ca:30:1e:17:da:13:1b:ce:72:56:b6:62:
aa:8b:eb:0c:27:fe:c6:ea:f6:bf:45:60:43:26:67:
53:de:b1:f6:c1:c1:46:1b:0e:d3:9b:5b:c5:ed:46:
81:34:1b:78:e7:37:17:67:d2:4c:0b:44:06:7e:a6:
6e:8e:3d:15:b1:fa:0b:85:9d:a5:1e:e3:90:42:a6:
cd:54:06:e7:96:43:f5:0c:10:d7:dd:ae:9c:15:83:
1c:25:57:ab:cc:c5:4a:89:7c:7a:19:41:d9:ce:cf:
da:d1:93:65:7f:b5:6f:8b:85:4b:34:d3:b0:eb:98:
3d:63:67:b9:ee:c0:44:ce:28:f6:58:4f:05:8f:f3:
d9:9a:67:39:8d:75:29:69:3c:d3:79:7b:1e:ef:e4:
2d:e9:9d:76:53:30:7c:32:c5:62:cd:59:a8:f7:20:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:78:4E:59:F7:77:43:CC:A3:20:95:E3:35:00:18:99:53:C7:1A
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:01:3d:c2:13:9c:ad:89:fe:d2:a2:72:59:96:84:9b:06:d0:
e2:a9:96:84:21:41:05:d9:b2:66:56:dd:cb:51:be:bf:5d:22:
70:1c:eb:15:c8:fa:6a:9c:c9:26:22:cb:1c:4b:dc:17:f5:c3:
3e:91:1f:8f:d6:92:ed:a9:8f:ce:93:05:83:63:d4:d1:22:7b:
2e:ad:5f:9a:8a:4b:02:33:db:58:be:59:4a:f8:93:34:67:55:
fc:48:67:f7:0a:50:95:e4:32:b1:7d:5c:fb:13:34:9b:19:c5:
60:fe:5e:8e:a0:62:39:b0:c8:83:9f:c3:e6:56:a0:17:28:d4:
45:19:16:37:18:2c:78:f4:1f:4d:3e:a0:a2:c7:86:2c:6b:dc:
fa:c5:db:2a:20:04:da:d9:a2:27:af:81:49:1c:88:1b:e1:5c:
01:c5:a9:04:46:52:43:55:06:2b:e2:1a:9b:23:73:2a:36:48:
4a:85:27:18:fe:eb:e5:e5:59:28:7d:7a:d6:db:d5:39:78:b1:
f0:a7:5a:ff:01:67:cc:30:4b:24:19:bf:39:e6:ff:56:b4:33:
ea:57:fc:01:37:b3:81:d0:b6:1f:38:94:62:cc:a9:a7:95:f2:
52:c5:93:ec:1e:84:3a:2d:e3:85:c1:2a:03:9f:ba:9f:32:51:
e1:dc:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:41 2025 by rpki-client