Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: xbPykhfmLfF4smobENa5VyycTg4Laz1yLVhPqEPoKCQ=
Subject key identifier: C8:4D:4C:5C:44:8A:67:9F:BA:8C:9A:2F:53:BC:55:C6:B2:9C:82:A2
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 01989448E6D263E7DD09C0F8F852229E0958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 14:01:02 +0000
Manifest this update: Sun 10 Aug 2025 14:01:02 +0000
Manifest next update: Mon 11 Aug 2025 14:01:02 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: C0SAHakpNBI0+bv+xbrBvGgCPLu3Vx3NPLsam9Fxzu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:e6:d2:63:e7:dd:09:c0:f8:f8:52:22:9e:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Aug 10 14:01:02 2025 GMT
Not After : Aug 11 14:01:02 2025 GMT
Subject: CN=c84d4c5c448a679fba8c9a2f53bc55c6b29c82a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:28:6c:bf:43:27:a4:33:38:9f:49:c4:5f:
63:50:33:bf:93:08:84:60:60:c0:ab:59:fc:e6:ce:
59:7c:d0:22:e5:c8:38:4e:4e:c6:af:a0:38:3a:6e:
60:c7:82:5d:19:a4:5b:3c:7a:7b:dc:d2:da:11:58:
b0:67:e2:0e:0e:81:25:73:0f:46:f4:29:04:ea:c5:
ca:75:d5:90:39:37:68:6d:b3:55:7a:da:2f:76:6d:
48:1e:3a:4a:a9:3e:e1:f4:6f:98:67:de:8c:84:74:
fd:18:14:b5:35:1e:08:4e:f7:81:f7:4b:8f:e2:fb:
12:c8:e8:27:0a:1a:36:b3:06:9f:9f:7f:58:ad:09:
40:19:7e:7d:27:ab:56:3b:bd:41:ce:1e:82:9a:b5:
c2:86:18:70:8d:65:b3:7d:3f:a8:4f:8a:91:c3:ba:
44:91:20:4c:16:f9:c1:c7:70:77:c5:b4:6d:18:65:
ad:83:8a:99:bf:4a:d9:34:b5:d7:60:80:02:ff:3e:
47:96:7c:49:8e:c3:c5:5f:65:82:48:9a:20:1a:46:
27:c8:aa:e6:bc:eb:aa:ac:73:73:05:2a:46:7e:04:
e7:33:4c:4f:8e:52:77:8d:c3:ec:3e:14:86:94:e9:
4d:12:99:29:3d:47:88:54:2a:81:59:f5:05:a1:51:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:4C:5C:44:8A:67:9F:BA:8C:9A:2F:53:BC:55:C6:B2:9C:82:A2
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:01:8c:5a:03:b2:d2:fe:e7:bc:0c:83:d2:bb:08:86:16:c7:
76:92:f6:1d:8a:a4:aa:a8:27:e8:20:b6:c2:90:3c:29:13:f6:
1d:f0:62:fa:39:57:c2:89:ac:00:d6:60:10:c7:32:b6:3f:c8:
bb:2b:e3:5a:46:1a:69:e3:b8:b4:fd:1d:62:a9:cd:24:4c:84:
df:24:10:38:c7:fc:a6:92:e3:f7:c0:b0:90:0b:3f:f7:5c:13:
54:02:9f:b5:75:b4:57:c7:b7:6c:dc:f5:be:ef:a3:e0:46:41:
8a:31:4a:ef:1b:e2:32:78:66:af:dc:82:2a:13:bf:0d:59:7f:
ad:db:40:49:de:47:6a:bf:7c:84:f4:98:67:5c:d5:9d:37:24:
ed:fe:97:e6:56:a9:65:8a:24:f9:ed:4e:b5:c8:38:be:60:f0:
cb:bc:99:2a:b3:88:c3:77:80:7b:58:0c:61:11:5a:10:fc:d3:
8e:31:a8:d0:65:72:8b:5c:63:38:06:8e:df:e7:85:16:4e:fd:
00:0d:e4:3e:21:53:60:a3:7c:f5:3c:77:92:2e:e8:78:ce:93:
11:40:73:5e:bf:93:ac:f9:ba:78:92:66:68:46:80:7f:f2:da:
5a:32:60:2e:2b:70:5a:37:41:3d:bf:7c:6e:af:6b:d7:64:bd:
84:27:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:40 2025 by rpki-client