Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: ljYPr1GFtoYUpN8IuFybwiVLGf6F7iuqhIuFxxLcf+k=
Subject key identifier: D4:60:4B:E3:F7:C6:3F:93:2A:94:88:D7:68:88:A4:4F:96:8A:82:94
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 01987D8AAA527BE1A630EDEE8AEA834FB6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 05B4
Signing time: Wed 06 Aug 2025 04:01:36 +0000
Manifest this update: Wed 06 Aug 2025 04:01:36 +0000
Manifest next update: Thu 07 Aug 2025 04:01:36 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: HRWMttCsCZX0TyNsNErjOY0noNRPDnVUpbSbvKB8lYI=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:aa:52:7b:e1:a6:30:ed:ee:8a:ea:83:4f:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Aug 6 04:01:36 2025 GMT
Not After : Aug 7 04:01:36 2025 GMT
Subject: CN=d4604be3f7c63f932a9488d76888a44f968a8294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:af:92:90:9c:41:1a:16:45:82:cd:a4:e0:
7e:01:fb:3f:e9:3d:7c:c6:e5:88:c5:25:02:41:0f:
5a:8a:71:9b:2f:05:2e:c8:7b:7f:de:d5:18:4c:57:
31:01:b1:12:61:0e:7d:85:ab:17:67:a4:76:4a:34:
36:00:79:c2:9c:07:cf:7d:9d:08:59:00:66:a6:54:
3b:f6:99:4e:2c:1f:d7:1f:b6:2f:6b:3f:d5:bc:4c:
5a:2c:09:66:0a:c6:5b:f8:e9:cb:bd:62:a6:18:c9:
ed:d0:88:b2:02:ef:3a:6b:42:8c:fc:6e:2a:9f:56:
7f:ae:c3:d1:ba:c2:53:f4:07:cd:ec:01:f0:fa:a3:
4b:7d:a8:58:6b:c2:96:8f:16:eb:e8:1e:6c:ca:63:
40:06:e9:73:21:41:b4:c0:46:14:c0:2b:8e:80:03:
b2:5a:c5:41:9f:09:fd:27:f3:ac:4a:40:cf:53:92:
54:e5:ec:69:f7:db:21:d7:f6:5b:f6:49:6b:8d:b8:
42:e7:82:e1:42:77:00:f6:84:95:7d:5a:61:34:22:
5a:08:e6:63:03:af:34:76:18:45:8c:bf:fb:0f:68:
4b:46:d8:35:4a:43:4d:4a:9e:84:a1:f5:1a:89:d8:
e9:aa:8e:a1:3f:59:15:a8:a6:fd:86:cd:b5:c0:af:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:4B:E3:F7:C6:3F:93:2A:94:88:D7:68:88:A4:4F:96:8A:82:94
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:78:b9:83:60:2d:e4:78:87:c7:17:8c:72:60:68:a2:82:
00:fa:33:e4:a2:a4:16:3b:7d:3f:fb:6c:ae:25:88:2e:95:b4:
3f:05:31:37:f6:5b:27:bc:e8:cc:32:20:b3:a1:25:41:4a:f4:
2e:54:7c:4c:5e:71:6d:ab:d1:b6:39:4c:73:ab:a8:12:7f:3d:
8c:0c:3a:bb:03:58:3d:20:d9:fe:e9:9d:78:57:1f:5e:45:c8:
e6:c0:9d:76:13:a7:b4:46:1c:2f:bd:40:31:6b:d4:90:da:ed:
75:e1:82:f9:bb:0d:4b:e5:9f:9e:6d:6f:11:63:58:02:12:46:
2a:1f:dd:97:9a:14:ff:b6:b0:ac:67:c0:45:b8:65:d3:ae:ba:
39:55:7d:ea:75:d7:0d:5c:9f:94:d4:18:d0:ea:82:d0:23:97:
dc:3a:03:66:c9:ba:51:38:9c:dd:98:9c:57:c3:3f:a4:c7:af:
da:8c:ef:3e:31:40:b6:2d:80:2b:27:c4:c7:8b:c5:7b:95:02:
b6:b3:b7:a0:9b:eb:a8:c1:5f:0e:42:40:2d:fb:d5:69:77:bc:
73:7d:e6:0f:d4:08:da:a7:1e:42:fe:ac:18:a7:6a:5f:5b:56:
d1:b2:1e:e7:9d:cf:c5:38:51:46:7f:06:9b:92:45:f8:78:fd:
fa:ad:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:51 2025 by rpki-client