Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: iASdttkGzM8fTviMxBEetNG0hHOSv1GBSq9W0psoAFo=
Subject key identifier: 23:D7:40:69:D8:ED:AE:49:36:92:E8:EB:73:C1:DC:61:AE:51:F4:BA
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 01987E65EE6D4CB804B1A3238673A38D1EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 08:01:06 +0000
Manifest this update: Wed 06 Aug 2025 08:01:06 +0000
Manifest next update: Thu 07 Aug 2025 08:01:06 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: wxjP3PQKovZxrjmvU7BjCgS1PERGCA12Jpf54JpT9yo=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:ee:6d:4c:b8:04:b1:a3:23:86:73:a3:8d:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Aug 6 08:01:06 2025 GMT
Not After : Aug 7 08:01:06 2025 GMT
Subject: CN=23d74069d8edae493692e8eb73c1dc61ae51f4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:63:26:b3:17:14:1f:bf:42:89:c0:54:cb:
7c:ab:b1:79:da:b5:bd:17:32:d7:4a:5e:7a:71:c5:
ca:b0:e6:3d:c5:b9:ec:cb:e9:e3:aa:14:cc:d1:1a:
0c:46:f6:40:87:f7:15:a5:1f:4e:8e:5d:21:ac:09:
73:98:fc:cf:f7:74:73:33:bf:01:3a:9a:3f:bd:88:
78:65:6b:fa:7a:8d:8c:d6:cd:c5:36:8d:ad:36:a2:
82:9f:3f:f8:67:a4:30:15:73:03:7f:52:1c:c9:24:
d4:0a:10:3f:3d:87:a0:ea:ea:d0:27:4b:62:e7:8e:
97:5a:98:39:ca:9c:ad:95:db:c2:7c:c9:95:34:41:
3a:9c:88:c5:85:e2:f7:dc:58:55:04:1e:7c:30:cd:
01:96:71:e7:b3:bf:7b:f3:9a:fc:9b:ac:96:b8:c2:
4a:64:9c:26:ac:4e:6e:50:a8:04:a1:15:00:b1:55:
4d:45:8c:a8:d0:ae:62:7b:12:be:91:ea:c9:ce:ce:
33:7a:18:92:c3:e0:18:05:d8:ea:72:e1:c3:19:98:
f6:6e:e0:25:4f:37:d8:a9:0d:bc:4c:eb:bb:fb:3c:
bd:46:a9:cb:21:3d:da:b2:cb:83:12:75:f5:56:56:
16:97:d4:aa:40:75:d7:3f:3b:63:a4:f5:6b:f7:3e:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:40:69:D8:ED:AE:49:36:92:E8:EB:73:C1:DC:61:AE:51:F4:BA
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:97:f9:c0:ba:17:3b:1f:f6:c9:a3:21:ed:01:96:fb:7a:
46:d5:1e:89:31:5b:01:e3:6b:50:6c:8a:fe:c2:06:6f:33:d8:
0d:3c:a5:44:7d:6b:26:bb:de:75:0d:3a:80:ad:f7:60:c7:16:
93:c8:eb:d7:12:46:53:e6:b2:c4:af:e8:43:3e:fb:ee:09:d8:
51:d0:c2:01:02:38:59:08:e1:e0:b0:77:5e:ca:34:ee:f9:cc:
88:25:be:85:35:db:9c:29:32:01:22:5a:89:d0:0d:6b:24:0f:
2c:0d:60:d2:93:51:e0:a3:a8:a6:9a:6a:7b:8a:67:69:e8:c4:
db:c5:28:dc:a5:a3:ad:ae:0c:e2:f6:75:84:0c:79:8f:ad:4a:
b7:0e:ec:01:c5:24:09:96:0e:4c:68:bd:37:15:ef:42:a7:21:
5b:0b:c5:e4:20:5c:f5:d7:0c:51:ed:31:68:30:85:51:d6:d1:
d4:87:c2:ad:c3:f9:7e:40:1e:17:4a:0e:9b:ac:18:a2:ce:b8:
22:ae:56:f4:52:fc:50:53:49:57:17:1c:f1:14:94:15:b3:a3:
c6:9b:da:68:15:b1:c4:69:00:88:70:c4:12:c6:0b:91:18:33:
b8:b8:ed:d9:7e:96:e1:30:69:eb:c6:25:ce:fa:ae:e0:b6:cf:
a8:ff:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:51 2025 by rpki-client