Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: aiAeh0v+H1M9Ga2caCgCTuiQ3QW6OOrnofTfiYzFnwA=
Subject key identifier: DA:BE:4E:4D:98:52:A5:A3:85:85:F0:E1:56:8B:3D:6C:54:59:3D:8E
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019897495EAAC0BC87349D6657D68BF3B172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 136B
Signing time: Mon 11 Aug 2025 04:00:24 +0000
Manifest this update: Mon 11 Aug 2025 04:00:24 +0000
Manifest next update: Tue 12 Aug 2025 04:00:24 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: GNVZ9FCBtFeT/LTrEou157V4hWZu/dpv8C8AnyAV5sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:5e:aa:c0:bc:87:34:9d:66:57:d6:8b:f3:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Aug 11 04:00:24 2025 GMT
Not After : Aug 12 04:00:24 2025 GMT
Subject: CN=dabe4e4d9852a5a38585f0e1568b3d6c54593d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:6d:63:eb:d7:c6:ec:e2:23:de:14:57:e0:
5f:ad:45:99:27:54:e0:05:3c:de:81:8d:19:28:8f:
84:db:2f:b7:41:a8:93:f9:99:7c:ea:9f:2e:8a:7e:
c4:90:a7:70:bd:88:3b:ed:b6:fb:9b:6e:92:a9:3a:
c7:f4:b6:9d:37:90:96:16:23:11:b7:62:66:28:f2:
12:92:e1:68:7b:79:80:49:66:52:63:59:9c:e9:6d:
c8:83:d8:ba:87:65:c6:6e:b3:c3:fc:2c:05:c4:14:
72:df:61:ea:7b:bc:3d:05:c3:5d:37:f9:74:a5:cd:
76:4b:7e:34:f4:5a:32:5e:34:68:df:85:33:cc:98:
a4:a1:06:09:12:30:4e:b8:3f:0c:d4:9d:c5:16:d9:
79:90:49:cf:f9:4a:a8:b3:55:76:59:a6:0b:fa:c5:
9f:29:61:11:c3:40:43:ed:1f:bb:f5:30:a7:34:f5:
55:9c:1c:c6:1e:8d:75:7e:90:28:2c:7f:88:a0:74:
02:14:ab:1d:13:b5:47:be:06:3b:0e:8b:60:9e:ed:
03:a4:0a:0e:e5:44:6d:a6:af:61:c4:a6:b1:9c:42:
5e:65:8d:3d:a9:a8:57:0c:5f:be:52:17:a5:77:57:
0d:da:09:01:dc:39:ba:8c:8c:f5:10:e1:81:0e:9e:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BE:4E:4D:98:52:A5:A3:85:85:F0:E1:56:8B:3D:6C:54:59:3D:8E
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:81:fd:8a:d1:a7:ad:d1:e1:29:80:10:05:9e:fd:b0:95:
74:61:25:f6:2f:d8:f3:92:c6:42:8e:67:b6:59:da:2a:fb:29:
a6:84:46:e2:ef:41:6e:9f:a7:d5:f5:2c:25:8a:8f:86:ad:5e:
25:bd:b3:26:a0:97:f3:2a:bb:93:f9:05:df:cc:fb:92:b9:ae:
5f:a6:e3:01:29:3a:e0:32:08:b8:15:46:a8:fa:2e:10:78:7f:
ff:f5:0e:83:b8:14:7f:7f:d0:c0:f0:39:8f:c6:7e:85:f7:5a:
b0:8c:01:56:84:59:57:d2:cb:17:91:f9:8d:a8:23:f0:54:bd:
cc:b4:b6:4e:90:5c:f5:88:16:3d:d2:66:26:32:9e:5e:67:00:
43:f4:9a:2f:8a:5c:23:50:3e:5c:14:1a:f0:58:11:ff:2e:d6:
57:64:a6:84:c6:e1:45:66:49:eb:e9:f2:c7:d7:14:ef:f0:27:
e9:85:6d:a4:67:f2:c9:bf:f6:b4:0f:29:09:37:62:aa:d2:77:
bd:c5:91:93:83:e8:ea:69:88:c0:51:bd:14:cc:f4:a2:db:d6:
50:3f:2c:e0:95:b1:a0:ef:8b:79:2d:5d:c5:de:ce:ae:26:80:
32:f8:27:12:fb:6d:21:69:27:6e:2b:38:19:dd:67:0c:b1:95:
b3:a7:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:51:56 2025 by rpki-client