Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: ZARWCJkd0vzqK+jAZOLX5SrX9DHSMnVt3N4sdkKOSQU=
Subject key identifier: 9C:47:89:33:D7:48:D2:3D:1B:7E:16:0A:27:53:9A:3D:EF:19:DB:94
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 01989591F094D902550B09F8169ABD954F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 1023
Signing time: Sun 10 Aug 2025 20:00:26 +0000
Manifest this update: Sun 10 Aug 2025 20:00:26 +0000
Manifest next update: Mon 11 Aug 2025 20:00:26 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: WF99f25vZiT0LY8YOyLkZuLeY7w3ghmQGWE72dh3A2I=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:91:f0:94:d9:02:55:0b:09:f8:16:9a:bd:95:4f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Aug 10 20:00:26 2025 GMT
Not After : Aug 11 20:00:26 2025 GMT
Subject: CN=9c478933d748d23d1b7e160a27539a3def19db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:55:be:e3:e1:be:7a:94:56:bc:af:37:d2:
6c:2a:07:f7:ba:0d:57:9c:6e:ca:e5:92:f8:8b:5f:
23:a7:2d:ba:be:5e:04:05:df:98:87:60:85:a7:c3:
ee:d6:b4:01:11:04:74:b7:ec:28:36:3b:01:4e:e6:
3a:23:dc:af:a2:a7:7b:ea:2b:c7:5a:1b:45:2c:51:
55:5f:99:a6:1e:1b:a3:53:72:1c:b0:77:79:34:30:
0f:9e:4e:30:1f:59:1b:fc:c2:f8:c3:ae:ce:83:d0:
46:dc:3f:43:61:44:28:cd:26:5a:0a:85:b6:86:1d:
28:28:f7:9f:3b:1a:96:09:1c:7f:5a:5a:4b:2b:ec:
3d:d1:b5:6b:44:4e:12:67:5d:04:eb:bc:b0:d7:8c:
f2:4b:a8:59:8d:f5:96:29:ed:50:e6:e9:3a:d8:77:
76:92:b1:cb:8e:d7:74:92:33:97:77:a5:7c:c0:48:
92:aa:ca:54:b8:0a:92:72:2c:d5:d5:e6:3b:c2:d7:
16:fc:1f:5b:9c:6e:3d:2e:1e:7b:93:d6:54:ce:34:
87:43:e7:11:cf:6c:2b:73:4e:6f:78:e8:af:26:e5:
3c:8d:d9:10:4e:d5:5a:d9:15:92:24:d5:b2:3e:74:
cb:44:43:8d:fc:1b:fc:15:c7:55:0d:eb:80:a5:af:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:89:33:D7:48:D2:3D:1B:7E:16:0A:27:53:9A:3D:EF:19:DB:94
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:46:5a:85:43:b7:6e:ec:62:a4:76:e3:35:10:44:e5:89:
e6:85:26:36:a6:e8:21:f0:a3:0d:b4:dc:b9:ff:2d:74:26:aa:
32:7e:8e:75:4d:ea:32:6a:2f:1f:6f:8a:3d:99:22:95:98:a3:
04:6f:68:e6:22:e6:0b:e3:4b:2e:27:d4:65:30:7b:e9:ce:a4:
20:36:e1:cd:67:42:b6:3b:5c:0f:2f:9a:f6:b3:f4:68:53:51:
9a:62:cf:a6:b7:7a:6c:be:8c:c1:ea:fc:e7:3c:78:2f:5f:d8:
3e:0d:0f:64:ac:30:e9:2e:45:4e:b9:a9:a7:0c:38:92:f7:f6:
9c:43:ad:2a:4d:f5:b3:64:e2:3a:70:52:e7:04:4a:da:c9:e3:
a1:3f:ed:fc:65:0c:b7:d3:f8:a8:80:08:5f:a0:53:d2:22:e4:
ee:7c:76:37:85:ee:8a:49:c4:fe:d0:4c:bd:30:56:d8:04:d8:
fd:40:42:a2:89:6f:7f:bf:88:fa:82:25:9a:10:5c:27:56:76:
49:c9:bb:9c:0b:5b:e8:94:94:e3:06:f4:d9:d3:ef:7d:05:b2:
57:93:1f:15:6b:25:58:1f:af:7a:ff:b5:36:07:75:f0:f1:1c:
87:5a:34:57:b7:1c:66:97:66:b2:72:45:88:4d:91:3e:49:84:
e5:4a:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:04 2025 by rpki-client