Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: Ue94IX32/XjPiMpNKdCCvAjUp6JvnqKSmrPrBP4GRac=
Subject key identifier: 48:51:A8:54:0F:B6:E8:F7:F8:44:CC:A7:96:B5:76:0E:3E:D6:2E:68
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 01987DF8870E05765311D3EABE36100450EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 1585
Signing time: Wed 06 Aug 2025 06:01:36 +0000
Manifest this update: Wed 06 Aug 2025 06:01:36 +0000
Manifest next update: Thu 07 Aug 2025 06:01:36 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: WpO2cNuyjnEev14V2iRg0jtLQ/4r/WgyJM13VWyKnLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:87:0e:05:76:53:11:d3:ea:be:36:10:04:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Aug 6 06:01:36 2025 GMT
Not After : Aug 7 06:01:36 2025 GMT
Subject: CN=4851a8540fb6e8f7f844cca796b5760e3ed62e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:f4:e1:3f:f7:e6:45:70:ba:4f:ad:29:45:
3a:bf:13:06:c8:3e:3f:a8:f0:2f:15:81:4d:7c:a1:
5c:1b:4c:85:86:e7:6b:24:7f:ca:2f:03:cb:48:4c:
22:0f:2c:ed:1d:7d:08:a8:5c:f7:4c:90:fb:8c:6b:
c4:b6:c2:ca:3b:cf:d2:3b:94:87:3a:1d:43:3d:b9:
37:60:5e:06:81:5e:cd:91:36:36:ef:31:de:0a:13:
be:6d:47:49:80:78:8d:f5:1d:c3:ca:53:e0:7e:e5:
cb:ff:51:c9:e9:51:96:e2:f2:0d:6e:86:29:2b:01:
24:a9:3a:bc:9b:19:17:4b:73:1e:59:5f:c1:f6:d6:
fe:17:e4:1a:09:e9:a5:2a:fd:dc:dc:f3:6e:03:ce:
25:ea:30:6f:b7:83:01:2b:98:27:02:07:f0:16:dd:
57:96:0d:45:23:a6:32:1e:33:75:d8:6f:de:88:80:
2f:7f:87:a4:e6:74:91:f3:93:94:e1:1c:0d:f2:77:
f1:38:c4:30:e8:0b:8f:ca:85:01:12:c5:1a:6d:b2:
84:d7:3b:48:c2:55:f2:91:8b:ce:e4:c0:e0:e2:f1:
31:73:ed:d5:c5:90:39:6f:85:0a:35:b2:d2:60:89:
aa:08:d3:94:b9:65:5e:24:b7:50:7e:ba:01:92:bd:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:A8:54:0F:B6:E8:F7:F8:44:CC:A7:96:B5:76:0E:3E:D6:2E:68
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:37:be:ac:43:7b:44:65:25:63:f8:96:d2:bb:0f:55:c6:05:
b1:64:55:49:06:bb:82:5b:c5:92:b0:62:d9:3f:ea:e9:2c:4e:
d7:1d:e4:47:30:29:af:09:fd:ac:13:11:be:79:93:fa:c8:1d:
82:9d:2f:93:c9:27:0a:69:1c:b6:00:30:35:b4:84:e9:ca:62:
d3:24:70:fb:97:60:75:46:2d:9a:78:c5:31:dd:f4:2e:28:61:
1c:a2:72:8e:06:6b:d8:8b:95:81:fb:fd:fb:56:64:e4:93:e9:
0d:57:df:4c:2f:ac:31:18:6e:17:9f:5d:f2:ca:f5:1f:c2:5e:
c1:8e:06:97:8d:2d:28:33:b5:e3:d0:8a:ef:9e:2e:99:37:e4:
de:05:55:53:d5:45:bf:56:4c:d3:b8:79:71:61:85:12:9b:df:
6f:85:97:81:e4:c8:83:a9:3d:1a:26:d8:b4:ec:6c:a4:c6:d7:
a0:5f:fc:46:63:63:17:59:7e:37:26:d4:09:d6:b9:e1:19:76:
47:8f:7b:4d:a5:ea:73:75:19:52:80:ff:e3:3b:96:a5:24:8e:
38:9e:ac:c9:7b:27:31:ab:e5:af:12:e2:e8:7f:1d:4d:75:4a:
b8:85:17:8b:7f:4b:62:9a:5d:87:cd:f3:6c:ec:f4:9f:75:8f:
49:e9:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:49 2025 by rpki-client