Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: bYHjivVgmliHAhTjLq9HyXU40tvxM48lnRhvFtMifU4=
Subject key identifier: 2F:96:47:FC:C9:74:05:7A:3C:E9:91:7C:31:CF:9D:65:24:F5:7C:7A
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 0198838C9C133B2C71956A1AD5A41C11492F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 029F
Signing time: Thu 07 Aug 2025 08:01:26 +0000
Manifest this update: Thu 07 Aug 2025 08:01:26 +0000
Manifest next update: Fri 08 Aug 2025 08:01:26 +0000
Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: 7upNUbVL2Uf5pVk/da2KOCtnLL6T4arOrvECQRXWZ3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:9c:13:3b:2c:71:95:6a:1a:d5:a4:1c:11:49:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Aug 7 08:01:26 2025 GMT
Not After : Aug 8 08:01:26 2025 GMT
Subject: CN=2f9647fcc974057a3ce9917c31cf9d6524f57c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:e0:fd:40:f0:83:90:fc:a8:d0:da:f8:d8:
a4:69:c7:fe:a5:6d:18:95:ff:a8:ee:27:b1:ce:78:
5c:35:ff:f0:ab:32:f8:0e:92:e0:04:1a:77:b1:e4:
49:b9:1a:3c:9e:88:b8:a9:80:f5:c5:9b:8f:bf:4b:
c5:e2:b3:7c:83:5e:91:2d:91:cc:31:54:ca:d1:5e:
ea:2a:a4:02:c2:db:a5:f8:09:73:ff:42:2d:65:ad:
f4:ca:55:65:8c:fc:28:76:d4:6b:88:b6:dd:d1:fa:
b0:56:84:24:61:4d:ff:7c:04:1b:64:7f:72:73:4b:
dc:44:de:e3:d5:3c:c2:b8:36:7a:19:e8:28:35:56:
69:90:b5:25:2c:8f:60:15:f9:ff:6a:43:94:71:0d:
c0:54:b3:35:5d:97:33:22:92:b0:80:0d:08:d4:60:
2d:98:5f:d6:93:da:e4:be:4a:ba:21:01:95:56:85:
fd:51:98:59:34:9e:e7:c5:20:fc:83:ea:ab:41:4a:
ad:f6:86:8f:a6:1c:16:36:84:dc:03:92:d3:cc:af:
6a:8a:3a:d8:c5:e1:d6:85:2c:34:10:38:e4:67:2a:
68:37:3f:f5:ef:a5:a5:cd:09:63:69:78:d0:0f:b0:
b2:a8:e4:df:67:16:98:89:a6:fc:cc:2d:21:b9:4e:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:47:FC:C9:74:05:7A:3C:E9:91:7C:31:CF:9D:65:24:F5:7C:7A
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:8b:13:b3:e8:28:f1:c8:f3:fb:8f:71:82:93:c6:5c:63:
00:f2:f3:b2:42:2f:3c:37:b0:a3:e8:fe:5a:75:ac:f9:cd:1c:
15:bd:b0:51:fc:58:eb:00:b3:00:d9:66:15:8e:61:99:99:93:
3b:f6:e9:00:65:38:e5:ae:fe:d6:c1:2a:c4:a7:e9:e7:c8:e7:
cb:6e:09:1b:0d:26:23:50:46:22:d3:b8:0a:b9:ec:e9:53:87:
53:b7:48:e7:cd:3d:29:b0:c9:d4:78:ad:92:81:85:29:05:60:
b9:a8:15:1f:80:c3:b6:d3:81:a0:5f:32:05:60:63:23:b0:a1:
bc:14:1d:67:df:a5:5b:6a:e0:24:f3:fe:69:2c:ce:4f:b6:6c:
f8:8f:4d:64:1e:f4:98:2f:ba:65:46:8f:2a:99:1e:2e:80:dd:
30:89:c9:e3:4f:5a:29:5f:bf:96:dc:44:22:11:56:21:74:8e:
fc:9c:18:98:a5:e7:14:c1:d4:d2:47:32:a7:ca:06:c9:d0:13:
15:ec:73:50:04:e0:aa:e3:d7:25:26:c3:68:1e:97:01:a9:a3:
f5:9c:df:bf:09:fc:03:bd:2b:0f:81:fc:c1:7d:f4:f9:e2:21:
93:34:a2:ca:7d:a2:27:ed:4e:15:bf:45:f2:aa:7e:97:9d:2e:
83:d7:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:35 2025 by rpki-client