Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: eV4ur8fYDibdKKdCD7Y4fMHsHslz6IhL62zObmUJcs8=
Subject key identifier: 4F:93:88:C2:77:E7:69:5F:87:F4:14:0C:8B:BB:24:0F:BD:4F:DD:07
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0198A04E5CB919E044ED3001C4929E9C6CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1554
Signing time: Tue 12 Aug 2025 22:02:26 +0000
Manifest this update: Tue 12 Aug 2025 22:02:26 +0000
Manifest next update: Wed 13 Aug 2025 22:02:26 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: c1MUVstzBnm5k5iiO7qY/91BjpIDMAc8r7rtgoyPzQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:5c:b9:19:e0:44:ed:30:01:c4:92:9e:9c:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Aug 12 22:02:26 2025 GMT
Not After : Aug 13 22:02:26 2025 GMT
Subject: CN=4f9388c277e7695f87f4140c8bbb240fbd4fdd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:de:dc:98:47:70:bc:10:97:45:47:9f:30:
89:cd:37:03:24:ba:12:3e:3c:fe:92:5e:41:01:b8:
2f:b0:e1:a9:a6:69:54:96:ca:c4:4d:58:47:0a:97:
52:44:07:bb:88:26:d3:da:c6:bb:82:bf:e7:82:c5:
6c:fb:16:a8:b0:7c:c5:eb:d6:2e:f3:6a:f8:00:91:
4e:18:c9:6b:3b:b3:b3:fe:97:e6:f1:55:0d:e0:f6:
19:84:2e:71:4d:53:e6:5e:75:55:11:f7:7c:ff:51:
dc:50:02:97:45:31:0d:af:2d:bd:ff:da:8d:61:61:
cb:57:45:7a:b2:0a:3b:67:08:d6:78:82:78:11:a0:
02:ea:b7:96:2d:9a:f2:6d:e9:75:7b:3b:6b:fc:3f:
60:50:fa:78:78:9a:3e:f7:89:c7:0e:2a:b5:05:44:
62:b7:d4:c9:2a:6c:c9:8c:fa:61:70:4b:c4:28:69:
8c:25:86:eb:7e:d5:f3:df:20:83:b3:25:39:df:87:
de:74:92:ae:0e:d9:09:27:1c:ff:d6:b5:a7:7f:fb:
ea:d1:44:a8:b9:10:ee:4c:98:76:bf:56:42:7c:1e:
f8:20:f3:6a:26:97:4f:c6:0f:ea:a2:66:6f:6f:4c:
84:5c:66:e3:48:af:dc:14:4e:4c:c7:e2:22:c9:0d:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:88:C2:77:E7:69:5F:87:F4:14:0C:8B:BB:24:0F:BD:4F:DD:07
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:47:a1:3f:44:c4:cd:a3:4d:7f:ae:76:bb:95:cf:ec:c8:
25:0c:fa:e1:b2:a4:b1:20:c5:47:c0:7f:88:2e:72:b8:10:e6:
d1:18:f8:3e:fd:8c:9c:55:cd:34:e6:7a:5a:e2:f1:d3:06:b4:
6e:65:0c:f5:36:ce:f6:94:ab:10:a3:2e:de:9c:18:66:40:ab:
d1:5d:e7:aa:51:26:bd:30:76:c1:ce:89:22:7e:d4:65:6c:9e:
70:68:af:0d:95:92:5b:fb:f6:2d:61:e0:25:3e:6e:2f:8e:ea:
96:6f:1e:73:80:d8:4a:ba:de:51:69:3b:0a:89:a0:7a:ec:35:
c4:f6:08:e9:76:b0:06:bc:da:b4:97:ad:19:1b:bb:35:4f:20:
7f:7c:5e:c9:de:54:f0:46:78:fb:0a:5c:f1:e1:4f:5e:4b:a7:
d0:25:3a:93:e3:ff:3a:82:1a:c4:80:1c:e5:51:77:e0:c2:1d:
df:31:ff:c1:38:80:70:d5:d6:87:bc:ec:ea:b1:2c:29:88:50:
39:f2:d4:6b:17:d7:06:d8:70:25:5b:3a:46:50:87:0b:71:92:
df:00:61:06:92:32:2e:12:52:46:9d:6b:e8:8a:cf:46:2e:91:
75:50:af:35:1e:eb:72:fc:2a:7d:b6:d6:0a:99:98:3c:21:56:
ee:ac:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:32 2025 by rpki-client