Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: fWZC/OupkKhOz6aNrDPZE7ggrOqTPsuxVCgJ/Ze+t2E=
Subject key identifier: 24:88:41:B6:D2:6B:0F:58:72:68:83:35:05:18:C2:A1:F8:0E:95:6D
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 01987CAEA32F62F1E188FDF4CD925C932891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 00:01:16 +0000
Manifest this update: Wed 06 Aug 2025 00:01:16 +0000
Manifest next update: Thu 07 Aug 2025 00:01:16 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: TKEqo4Tpv9X8ASkH4vWCushJNY38KaxCQZH+tg4k5HQ=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:a3:2f:62:f1:e1:88:fd:f4:cd:92:5c:93:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Aug 6 00:01:16 2025 GMT
Not After : Aug 7 00:01:16 2025 GMT
Subject: CN=248841b6d26b0f58726883350518c2a1f80e956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:d3:b4:9c:3b:77:e3:d8:d3:fd:99:a2:05:
7e:29:d1:37:1c:64:32:4a:bd:96:85:cb:c9:4b:1c:
91:15:a0:2b:fb:ea:74:54:15:c4:35:fe:df:ce:0c:
08:c0:29:6b:27:bf:f7:3a:87:c4:a7:a5:84:68:4e:
4b:00:ff:d6:21:66:25:fc:26:46:6e:89:cf:f3:1b:
50:bd:41:9e:2f:d1:53:db:ca:c7:41:34:c7:b3:f8:
a7:38:1c:b8:a5:8c:26:5a:9d:5c:0d:f6:3e:dc:ad:
14:c0:c2:15:1d:86:c9:5c:49:d1:82:ca:67:a6:50:
da:2c:02:66:c9:f8:b1:03:f6:d7:ba:84:26:eb:ca:
d8:ca:07:02:b7:fa:b2:20:0a:0b:a8:c3:6f:a8:c5:
bc:17:31:d9:47:20:2e:fc:b0:2c:e2:32:5d:84:22:
3d:97:f2:fc:01:0e:5d:7d:a3:cf:75:67:4e:72:dc:
35:6e:9a:31:a5:8f:4a:33:6f:ad:9f:83:33:6b:33:
7d:b8:3f:cc:ac:c9:ee:05:80:ae:16:94:11:a8:ae:
08:17:2b:c0:8c:00:68:ba:4b:56:af:c1:59:d6:76:
5d:50:e6:53:f4:d8:a2:e0:3b:0c:0a:7d:d0:73:59:
fe:c1:27:26:cd:89:13:28:0a:ed:3d:8b:b6:db:e5:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:41:B6:D2:6B:0F:58:72:68:83:35:05:18:C2:A1:F8:0E:95:6D
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:04:c6:82:7d:ef:58:10:29:e3:b9:6a:7a:79:d2:a0:4a:41:
7a:b7:b3:29:5e:a1:be:2f:68:ab:31:8c:04:e1:dd:63:c5:2c:
45:a9:90:d3:fc:36:90:7c:0a:e1:33:9c:28:bc:e4:24:63:e4:
b5:48:9c:6a:93:e1:6f:c2:fa:27:43:68:1a:78:aa:ed:d0:96:
f1:1d:99:bb:c9:7a:74:de:c0:76:c9:37:0a:d8:40:8e:03:b2:
3a:f4:c5:00:8f:58:c8:f2:41:d2:24:3e:b9:a8:c8:4c:56:cc:
53:b9:15:a6:f6:14:e1:a7:1b:71:65:50:ed:3e:48:eb:62:88:
16:ef:ab:4e:34:41:54:58:49:5e:41:4e:b3:22:c8:75:07:d1:
d9:e9:89:4a:92:0a:b1:da:4e:7a:7c:bd:65:f6:94:29:a6:19:
2d:7c:29:77:7f:f8:fd:e4:44:fe:21:28:9c:2e:85:ad:04:06:
a2:33:fa:1e:b6:92:47:64:04:42:90:8a:7a:3c:cc:3a:b4:bc:
47:24:0f:31:68:75:d3:3b:97:75:f3:2b:1a:38:eb:0a:15:8e:
1a:bd:d7:ef:45:c9:aa:72:92:19:0e:31:c1:68:7f:6c:ba:33:
7c:b1:21:47:1d:96:42:ed:cb:a3:94:ed:0e:c7:54:ba:02:5b:
85:fd:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:01 2025 by rpki-client