Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: Yg0eBxT6INuEYnvYTSr6Xx0oPZMgmtxc1UXGRSReXDQ=
Subject key identifier: 5C:BF:99:0A:6A:27:51:E2:83:0C:F3:FE:10:F8:A5:5F:AE:68:C4:02
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 01988468591443B0F5F40E277EECBD87D002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 12:01:27 +0000
Manifest this update: Thu 07 Aug 2025 12:01:27 +0000
Manifest next update: Fri 08 Aug 2025 12:01:27 +0000
Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: eOzzZZg4gndhqj8QmSD9xFRdoDUdn7Q0CAA1Q4c4sE4=)
3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:68:59:14:43:b0:f5:f4:0e:27:7e:ec:bd:87:d0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Aug 7 12:01:27 2025 GMT
Not After : Aug 8 12:01:27 2025 GMT
Subject: CN=5cbf990a6a2751e2830cf3fe10f8a55fae68c402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:9b:ca:cd:88:70:39:d4:b5:9c:1d:a7:dc:
4f:4e:62:09:d7:d2:48:c9:59:08:35:8e:22:eb:05:
48:5b:98:8b:2e:5d:9c:a8:4a:02:ac:c7:52:60:e4:
0e:45:e2:cc:3d:90:73:e7:c8:ff:31:94:35:4b:74:
50:b6:92:86:14:4e:15:1d:54:f3:e2:d2:69:9e:db:
da:c1:80:37:bb:a8:e6:07:3c:25:0c:6d:0d:92:d2:
c3:6e:27:05:a7:f6:76:2a:e8:dc:a8:cd:2f:75:a9:
aa:c6:5a:d4:39:33:5b:bd:7c:6f:b4:ad:b6:7d:90:
a5:45:ad:6c:ce:fb:ff:aa:c0:a1:82:26:6c:a8:1e:
a6:a6:7a:74:53:7d:64:00:79:cf:65:f4:4c:ce:00:
99:4a:05:56:e2:f8:98:af:1f:06:2b:c1:87:3c:52:
91:91:28:a5:8f:5e:fb:11:2b:b7:f5:4b:ba:13:ce:
07:68:53:03:ec:e6:ae:ed:5f:70:50:55:d4:6c:41:
49:78:40:0b:f1:75:23:1b:ab:50:8e:b2:cf:a5:74:
7d:4d:0a:0e:df:d2:be:7f:90:c5:a8:9b:2d:2e:92:
8c:dd:6c:81:6e:ce:0e:36:92:aa:f7:4c:9a:af:3f:
a9:e0:6d:85:0e:f1:6f:fc:19:34:1e:fd:e7:72:5f:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:99:0A:6A:27:51:E2:83:0C:F3:FE:10:F8:A5:5F:AE:68:C4:02
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d9:18:e7:1c:54:50:f8:a7:32:69:88:9e:65:53:4d:29:08:
33:a7:32:df:06:57:63:47:65:64:8d:e6:91:ff:ee:12:41:c3:
35:92:e0:59:07:7b:6c:12:8a:09:17:30:a2:9d:8c:6a:f3:52:
1b:e6:5f:4b:9b:9a:f4:9f:6d:71:f8:fd:39:1c:22:94:9b:18:
d8:d7:48:a6:a1:30:a9:5c:56:ed:61:c9:58:f7:d3:3a:e1:85:
85:05:b2:d2:fe:6b:18:c4:a8:4a:29:00:a6:49:c6:a2:cd:28:
f8:12:57:8a:10:be:3a:9c:d1:fc:cc:97:b1:0e:e3:f9:9c:fc:
74:5f:49:ab:ad:02:d3:dc:8b:82:74:91:ac:89:fe:27:d6:d1:
80:9a:a7:10:7a:7d:8d:9e:16:ae:68:4d:92:a4:c8:21:a0:8e:
16:a7:45:ca:a7:e0:49:e7:21:aa:e9:a4:6f:43:6e:83:97:76:
c8:3f:04:09:b9:ba:30:a3:de:f6:aa:ec:b3:e2:16:07:3e:57:
51:b6:ad:89:47:f2:ee:ac:1f:60:20:1b:1a:f3:6d:7b:f5:88:
b0:ad:f8:a6:66:3b:fd:cc:8e:78:cd:7e:06:28:31:c4:b7:ea:
88:33:b9:4a:57:eb:75:ad:88:7d:b4:e7:c3:9d:49:8f:f2:8c:
d0:d6:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:21:00 2025 by rpki-client