Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: memnxqqTafiv4BN1Btl+/Ks7N1+2CJl9IGj9Ye5CjOQ=
Subject key identifier: 0A:8E:F6:E6:50:77:EE:A1:5F:78:18:2E:2D:6C:58:74:2B:9C:EB:FB
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01987B9C03940181BCB4B92F7B771A4C708C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1631
Signing time: Tue 05 Aug 2025 19:01:18 +0000
Manifest this update: Tue 05 Aug 2025 19:01:18 +0000
Manifest next update: Wed 06 Aug 2025 19:01:18 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: xo3kvgJILG9PMNpHKzeU0xMhn1rYJsMlULDVlHSmQVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:03:94:01:81:bc:b4:b9:2f:7b:77:1a:4c:70:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Aug 5 19:01:18 2025 GMT
Not After : Aug 6 19:01:18 2025 GMT
Subject: CN=0a8ef6e65077eea15f78182e2d6c58742b9cebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:0d:62:d1:8c:16:47:a3:e4:2f:d0:91:e0:
a1:24:27:1d:bb:89:70:f9:a7:db:9c:64:1d:6b:57:
c2:59:06:89:43:9a:a1:54:7d:db:b7:16:a1:f4:d2:
71:3d:67:e2:85:a5:37:c4:5f:40:61:1a:b8:87:6b:
d9:6d:33:a8:bd:c9:1f:fd:82:28:3e:de:f0:4b:f6:
46:39:29:36:98:ae:db:74:a4:cd:b2:7e:76:57:a9:
80:1e:ed:a9:65:5e:34:ec:16:54:ac:60:e7:56:2d:
f2:02:ff:f0:da:c9:a6:b4:d9:a0:1e:ed:f2:eb:00:
10:aa:15:89:93:5a:39:cd:05:5b:b6:3f:20:b5:a1:
2f:6a:cb:6c:3a:77:26:b7:5c:e7:dd:af:f5:a1:c9:
a4:cf:15:9f:72:48:b1:cf:37:a8:34:05:d7:09:4c:
20:95:b9:9f:95:73:ac:40:6e:36:a5:3f:6c:30:79:
6b:1c:ad:98:1c:01:e5:4f:0f:db:df:24:2c:f2:14:
b2:dd:80:9c:d1:db:36:bf:80:f1:4d:52:03:ce:76:
cc:b1:f3:3b:2b:f6:ae:4a:14:48:5d:50:0d:5e:bf:
a2:85:29:ce:01:cd:31:7b:da:85:61:73:7c:65:fa:
b2:27:b0:15:10:d3:1c:84:43:24:d4:5c:06:9d:c4:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:F6:E6:50:77:EE:A1:5F:78:18:2E:2D:6C:58:74:2B:9C:EB:FB
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:cd:91:11:aa:e7:50:e9:0e:48:31:a7:a5:c8:95:d4:b9:
b4:be:d2:4f:75:33:a3:2c:34:7e:54:13:dc:a8:f6:f3:9f:1b:
88:73:d4:c7:6f:aa:5f:52:dc:e3:c7:94:b5:c1:93:02:9c:17:
6b:9b:ad:23:a5:c7:28:84:cb:f8:95:54:ff:59:53:ac:21:0f:
65:18:d3:87:1d:36:80:2e:74:fc:b0:54:09:d7:1c:ae:39:dd:
99:d3:bd:1c:61:91:8a:bd:a5:ab:06:75:ce:80:7e:3f:c0:c5:
04:30:6f:30:f1:75:fd:ec:b0:ad:ae:91:35:74:e3:85:a3:40:
a9:83:76:09:ab:47:8d:30:bc:c7:75:9c:ed:90:f6:69:09:07:
67:fd:1c:9e:b3:68:04:c0:f1:95:de:c4:e1:7c:6b:f4:64:4b:
9b:c1:b2:7f:25:04:48:9b:f5:96:f1:19:05:e9:02:9f:d3:54:
e1:17:8b:46:8d:43:b9:5e:b9:60:29:ec:e5:fb:6a:b0:8d:2f:
22:e5:e6:96:74:17:a8:67:62:27:24:58:90:8a:9e:f7:cb:c1:
b9:7a:1e:71:85:40:83:23:84:27:b9:ed:50:8b:ae:2e:98:14:
77:ac:01:47:08:82:79:01:8c:30:72:39:f3:bf:65:4f:69:0b:
4b:9b:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:40 2025 by rpki-client