Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: +q7HBKIe5j+DoYclucMSRxNfwwZlcXKAs6WyYbso6cA=
Subject key identifier: 9C:34:3A:0D:88:D8:B0:C8:53:0F:B1:40:AB:C6:72:B1:3B:BD:AE:07
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019897EE336298833A2BCBBBF7C33C4C10CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 158B
Signing time: Mon 11 Aug 2025 07:00:26 +0000
Manifest this update: Mon 11 Aug 2025 07:00:26 +0000
Manifest next update: Tue 12 Aug 2025 07:00:26 +0000
Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=)
2: IBhlETgYaERfbB5CiLuY_-0qwMc.roa (hash: 5ejOqhZOZxTv95HyIIIT8jej3tcquGQMs7iyHCKL42E=)
3: SEMQLfPoFtmMG9uMdSXJeyNo3nk.roa (hash: ZD2o8n/XFRcCzyhjjBouPx+0N/ySWQHovrDaz6PBT8Q=)
4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: R3xcuhDzgE4Hvd1jn4CVV3j/czZvG+XqWdjAx9kcXJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:33:62:98:83:3a:2b:cb:bb:f7:c3:3c:4c:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Aug 11 07:00:26 2025 GMT
Not After : Aug 12 07:00:26 2025 GMT
Subject: CN=9c343a0d88d8b0c8530fb140abc672b13bbdae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:a0:3d:3a:15:45:28:0e:01:a9:a2:0e:cb:
c1:10:89:5e:2a:db:ef:5c:d6:60:af:6b:e6:b1:23:
cb:09:7d:4d:40:da:5f:74:e4:5e:ce:00:c5:16:a8:
f1:bf:d8:3f:60:83:26:da:5e:06:25:92:5a:20:c3:
b0:3c:ef:85:de:d0:65:8a:11:04:ea:4e:f3:b6:cf:
b0:86:fe:28:4f:66:21:09:31:24:14:dd:b1:81:54:
d6:7a:05:dd:f3:07:61:43:8a:d0:17:e9:41:7f:ab:
87:20:0b:1a:65:97:02:6f:fe:76:be:86:16:ff:bd:
c2:0c:e4:92:16:43:47:5f:d0:97:3e:c9:20:71:99:
87:66:7d:0a:c0:fe:98:6c:5a:bd:de:2a:b1:8a:7c:
f3:84:21:12:ff:94:5f:8b:4d:73:a9:fd:b3:fb:58:
62:f4:3d:2e:4d:d1:15:39:0f:6f:7a:8b:e4:2b:4e:
28:15:f3:5e:f7:95:b9:33:f6:49:e9:e2:ca:43:28:
16:0b:be:b1:fa:90:69:ec:f8:af:4b:d7:e8:3a:5d:
97:e0:f5:5b:4a:df:79:b6:b3:75:49:0c:a0:25:ad:
e9:b8:60:c4:5f:9f:22:9d:22:a1:d3:b6:02:a1:b3:
6f:d5:0d:e8:64:5d:3f:24:ff:8e:21:fa:88:aa:47:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:3A:0D:88:D8:B0:C8:53:0F:B1:40:AB:C6:72:B1:3B:BD:AE:07
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:47:d0:04:56:5d:f3:8f:8f:bd:3a:7a:cd:69:a8:f4:97:
42:3e:17:3f:44:a7:d4:81:e3:5c:fd:b7:a4:9c:73:03:a5:63:
96:33:15:4b:6c:7a:d3:fc:d6:77:ba:1b:a3:9b:0f:91:0f:a6:
69:77:64:55:33:6b:48:d1:fe:63:99:06:26:da:22:67:7a:06:
fe:77:96:f8:50:1c:e3:83:b8:e4:a5:b5:0e:c8:74:c8:e7:cf:
c3:7e:51:88:d8:8d:18:66:c5:66:bc:b0:72:65:1f:0a:92:ed:
ba:d1:3c:80:60:89:3d:ff:d5:30:3f:d7:6a:f4:73:87:14:4e:
50:cb:05:97:95:d2:7d:19:18:26:7f:12:54:1b:16:f5:3a:b0:
3f:2d:80:55:5e:4a:f9:76:97:c1:67:2d:95:e0:62:a1:34:83:
13:a2:2a:35:8b:0f:90:21:e8:7b:d3:58:32:1e:49:82:c8:e5:
1e:ec:22:be:a9:d0:52:52:63:69:e5:ed:25:6f:ab:20:f8:9e:
99:9c:a2:bb:45:23:c6:87:92:81:50:4b:b6:44:b3:d5:13:17:
52:45:0e:fe:76:d6:b1:02:6c:e9:bd:49:16:96:f1:18:9a:91:
96:79:46:d1:de:b9:b7:7e:be:f5:0c:9a:f4:55:e0:e0:c1:06:
bb:a9:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:53:51 2025 by rpki-client