Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: vWzPjCmXLd6CTJVbEoW4VjuexCiTfI9c6hLnNvFlhN4=
Subject key identifier: AF:3D:0D:57:07:F4:84:96:C4:20:D8:4E:96:E3:DD:95:32:C9:6C:53
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 01988DD8FE6E11622F04B4E71F7DC3C597A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0641
Signing time: Sat 09 Aug 2025 08:01:04 +0000
Manifest this update: Sat 09 Aug 2025 08:01:04 +0000
Manifest next update: Sun 10 Aug 2025 08:01:04 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: HN+otWiThvylVkTTMF/fG2KHY1AybbgO/HzbeyXGHwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:fe:6e:11:62:2f:04:b4:e7:1f:7d:c3:c5:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Aug 9 08:01:04 2025 GMT
Not After : Aug 10 08:01:04 2025 GMT
Subject: CN=af3d0d5707f48496c420d84e96e3dd9532c96c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:3b:60:bb:8b:22:bd:93:ae:a3:a8:c6:8a:
2b:4e:5b:6f:a2:24:a5:fc:7b:67:af:73:9a:4c:19:
8b:a9:32:18:36:62:f2:70:87:4a:d9:31:2c:5b:b1:
71:12:06:ba:ac:d5:5b:0a:b8:5a:b3:d4:3b:42:3c:
da:ff:82:36:94:64:f5:6b:cb:e0:1b:f3:68:3b:e4:
d9:0d:c7:7e:d9:c0:c6:85:5e:e0:58:42:f8:99:29:
c7:ba:35:7e:d2:38:d9:eb:39:0b:9c:ca:08:10:b0:
8a:b3:3a:b9:63:6a:f5:8c:9f:85:9e:16:2b:37:c7:
26:ce:36:46:77:00:57:72:db:e1:2e:2c:a4:08:5e:
6c:27:a7:70:a5:28:83:49:81:96:b1:c2:d1:ac:20:
59:39:81:03:2a:2e:c6:48:52:07:e1:b3:b0:fb:c3:
e0:5d:ba:d4:32:94:07:0a:52:c1:cd:0d:d4:89:a3:
0e:ed:7c:c6:22:c5:6a:0d:24:d0:e4:0c:1e:8e:59:
19:64:98:0c:32:d8:6d:d6:93:0c:2c:70:6e:b8:49:
d1:b1:21:13:e2:29:c3:a4:ad:d0:a6:3c:8e:db:87:
29:a0:66:8d:dc:6f:b9:08:33:fe:33:a5:47:db:a1:
91:37:5e:e9:50:6f:0e:15:8b:92:54:c2:77:fc:fd:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:0D:57:07:F4:84:96:C4:20:D8:4E:96:E3:DD:95:32:C9:6C:53
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:46:45:c0:3d:18:06:ea:df:cf:75:9a:c5:87:94:7e:19:bb:
36:09:5b:85:4b:31:76:e4:b7:62:be:e5:ba:df:dd:58:15:6b:
55:dc:6d:0f:8e:87:00:cc:d6:a7:e1:f2:83:90:b9:c2:fb:41:
36:06:b3:7d:ed:d1:4d:28:b8:3f:43:40:a6:09:63:68:19:db:
52:54:5d:a6:46:06:c4:f7:2b:b8:1c:7f:67:67:bf:a5:da:1b:
f5:8e:86:ed:1a:8e:0a:51:f6:26:70:41:77:df:fa:8a:6f:3b:
90:40:9c:fe:e3:62:ee:a0:bf:43:7e:fd:ef:47:31:11:2b:4b:
e1:6c:2f:7c:7d:8a:b6:97:3e:fe:9f:58:68:d9:c4:82:56:74:
88:99:8c:5f:54:e8:35:05:a8:24:55:d6:ed:ff:aa:73:cd:3c:
23:24:67:ad:77:8e:cb:76:6b:d4:0d:21:a5:c1:d0:40:6f:66:
2b:46:bd:87:c6:89:a6:9d:9b:8d:8e:de:e6:30:d4:72:b3:50:
1c:8f:7a:46:46:51:29:16:02:c7:01:1a:97:e2:75:3d:9b:38:
79:98:4f:31:4d:be:92:01:cc:a5:4b:f1:38:b9:08:fc:06:90:
8b:70:03:fc:7f:6d:6e:53:72:07:10:49:6b:f7:33:ce:7f:ab:
5a:b8:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:56 2025 by rpki-client