Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: +9YGFSBhcySk1zVSKMEMgWKA2CXJ83rGA5JsQXf3eX8=
Subject key identifier: A0:34:EF:17:AB:93:75:28:1E:62:3B:FD:E7:3F:19:DA:A7:BC:B4:06
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0198744FA2DF49DA9AB41C6736113E16A7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:32 +0000
Manifest this update: Mon 04 Aug 2025 09:00:32 +0000
Manifest next update: Tue 05 Aug 2025 09:00:32 +0000
Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: fswkOBDIxMEm7+TRNubGBzie9ZPmztEI/3TPxftdbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a2:df:49:da:9a:b4:1c:67:36:11:3e:16:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Aug 4 09:00:32 2025 GMT
Not After : Aug 5 09:00:32 2025 GMT
Subject: CN=a034ef17ab9375281e623bfde73f19daa7bcb406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:04:23:c2:27:5f:88:7a:6f:50:a6:09:63:
41:6a:a2:4c:b5:fb:64:8c:17:80:69:b5:9c:a7:4e:
3f:5a:fd:43:74:19:23:af:37:bc:ca:31:61:7b:0c:
2d:07:99:4c:cf:41:bc:3c:d8:97:73:66:41:5f:82:
24:20:e9:56:ce:a9:dd:55:50:89:2d:30:21:ad:d6:
9b:da:85:82:65:6c:f2:dd:92:f4:ab:f4:82:00:9a:
57:d9:70:7b:e5:58:2f:f9:8a:aa:d5:c2:3f:60:79:
3c:49:79:6e:e9:1c:fa:b9:33:db:86:14:f0:cb:82:
5d:66:b1:17:34:f7:25:82:13:fc:a2:08:bd:b8:59:
1b:c8:70:2a:ea:c7:c1:c7:7c:23:03:c5:bf:85:67:
0e:13:a2:97:d4:10:64:23:7d:62:64:a6:2f:90:ec:
0d:eb:3a:5b:13:d4:01:63:25:5b:43:6c:e8:88:9b:
aa:dd:09:23:18:ae:bb:ca:86:8e:0d:68:2b:90:b1:
e9:38:0a:e5:63:1b:83:e2:ff:65:fc:ee:ec:41:53:
df:7f:40:86:be:5c:2b:61:85:48:c9:b8:2a:eb:97:
97:d8:31:5c:b7:c3:6e:d0:1a:fd:6c:a5:ce:d7:c5:
11:59:78:35:8f:bb:5d:73:c7:5d:47:da:0b:e2:56:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:EF:17:AB:93:75:28:1E:62:3B:FD:E7:3F:19:DA:A7:BC:B4:06
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:89:ed:7d:bf:b1:67:95:89:95:af:b0:b9:c8:48:34:03:
55:86:50:19:bb:6e:08:66:68:66:b9:cb:3d:1c:37:04:f5:59:
5b:79:0b:b7:47:2f:64:61:ea:e2:4f:28:55:ca:2b:32:25:0c:
dd:88:91:32:4f:f3:9b:83:c7:1b:0b:b4:fe:3e:a6:d6:5d:60:
dc:61:6f:fa:2c:ba:65:19:e5:cd:d6:6f:c5:aa:44:d0:e4:10:
24:c3:f0:85:85:b7:8b:42:5b:24:56:28:19:e5:93:fa:1a:78:
aa:e7:12:57:36:0b:dd:f0:3d:9a:fd:0a:27:aa:47:50:25:de:
9f:24:56:b5:e0:1e:60:2e:7f:8f:cc:ef:63:bb:8a:9c:0d:ba:
84:42:23:9a:48:07:88:73:42:b1:a3:ac:63:f0:78:9d:9d:11:
97:b0:13:b3:0f:45:f3:c6:d6:71:42:ae:67:ee:5a:bf:83:8c:
d9:22:86:77:51:7c:b2:c9:a6:2d:bb:d4:c0:ed:58:52:2a:be:
2d:9d:dd:03:19:44:16:fd:a2:08:f6:95:99:2d:25:55:d9:17:
28:27:62:e7:9d:60:64:d1:ca:02:2d:4c:1e:7e:44:05:4a:df:
a9:4d:8c:8f:a4:49:3b:2e:a1:49:11:a8:60:1d:9f:27:83:ed:
44:27:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:05 2025 by rpki-client