Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File: klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier: N7YP8gMOoq7GZaYUxe+xVLB8ADJSRv5VXbYFHdFkFHo=
Subject key identifier: 4B:87:09:0B:D9:3C:31:EA:FF:75:5E:06:70:9A:FC:F9:36:F8:F0:44
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 01987ED3EB5624002E4D8B964ED40C98CD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number: 15BB
Signing time: Wed 06 Aug 2025 10:01:14 +0000
Manifest this update: Wed 06 Aug 2025 10:01:14 +0000
Manifest next update: Thu 07 Aug 2025 10:01:14 +0000
Files and hashes: 1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=)
2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: KNXY85rVXuxNsLwfR4/2zWpGB7mhBJbwON+4yc8RVLU=)
3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=)
4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:eb:56:24:00:2e:4d:8b:96:4e:d4:0c:98:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Aug 6 10:01:14 2025 GMT
Not After : Aug 7 10:01:14 2025 GMT
Subject: CN=4b87090bd93c31eaff755e06709afcf936f8f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:5e:44:d8:6a:43:9e:e3:3b:3d:63:20:29:
6b:ef:62:cf:0d:f5:b9:22:5b:bf:f7:34:47:34:a1:
4e:cd:e7:67:75:e6:0d:f9:ef:4c:82:20:be:c9:c6:
e1:a6:48:78:67:0d:14:2f:09:72:35:81:23:8b:9a:
cd:50:0c:ac:d2:e3:19:72:ce:33:9c:8d:3f:fa:05:
24:7e:f7:0d:c9:03:68:46:a3:b3:76:e7:1f:18:07:
8c:8f:c9:20:1e:26:9e:a5:14:af:e0:e8:ae:24:ec:
08:4d:89:34:54:e1:37:22:64:a1:ae:20:24:bb:4f:
fc:8f:48:26:37:be:ec:e8:8f:86:24:89:99:94:85:
09:c7:be:2b:05:6d:8a:5c:78:4f:8c:8d:e3:e2:42:
71:fe:e7:cd:f3:b3:28:af:25:11:38:9d:14:9f:fd:
c4:6c:a6:5c:f4:c0:2e:83:85:6b:84:09:24:3e:f5:
75:71:41:cd:f7:06:2c:91:8a:69:d6:d5:a7:f1:09:
d0:c3:a4:55:84:b3:60:3d:b5:b0:18:d4:38:c4:3c:
d0:51:6e:99:04:64:1b:3f:fa:30:60:b3:52:4a:05:
5e:21:c3:25:07:82:a6:27:90:ea:43:06:75:c6:68:
a3:60:ee:c0:0e:dd:49:23:ce:05:f1:3a:1c:6a:2c:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:87:09:0B:D9:3C:31:EA:FF:75:5E:06:70:9A:FC:F9:36:F8:F0:44
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ee:09:3e:f8:36:d7:6c:31:c1:3b:27:51:67:28:c5:72:99:
d4:55:65:d0:48:46:9e:17:cd:db:69:c9:bb:df:12:7c:e6:34:
c1:8f:d0:b6:a6:fd:3e:4e:c8:86:3c:9d:c0:60:b9:1d:c7:41:
e3:2c:03:5a:38:39:7b:fa:cf:6c:b6:04:6d:7e:a0:89:c7:61:
89:4f:d2:32:53:b5:c1:fe:e5:d6:64:61:01:93:cf:5d:1a:13:
e0:14:20:6b:4f:a2:bc:1d:d6:0f:b7:ff:c5:f4:b1:dd:0c:ac:
cb:54:3f:aa:16:8c:d5:1e:2f:16:d9:05:1e:c4:7c:b0:a7:f7:
9a:d8:b8:c6:4f:75:05:90:e6:58:82:15:f5:9e:82:b4:1e:2d:
45:a3:61:67:5d:8e:1e:71:24:79:fe:6d:35:1e:06:20:4a:a0:
56:4b:99:ab:3d:03:da:95:e8:e2:3c:3c:f8:b1:8e:7f:b5:b6:
64:7c:f1:dd:b3:62:2e:33:5a:48:27:75:22:8f:7a:8a:8b:21:
ae:84:56:e0:17:a3:64:3d:90:5e:f8:39:4a:14:ba:23:d5:59:
34:68:84:ca:62:13:cc:45:df:83:48:25:44:b5:41:46:77:34:
56:ed:bf:77:56:82:eb:0d:44:bc:66:8e:83:3a:3b:c0:24:14:
48:ce:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:37 2025 by rpki-client