Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: nlkSNRaC4u8YnWL9sB1tHnSHJMs6/rDuc6GRnwdOqeU=
Subject key identifier: 9E:82:2F:A7:13:AF:7F:BB:BD:95:1B:27:B7:EC:C4:D0:88:5B:10:1A
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 0198955BCC3126B2846A7748F3E6FC3E772C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0AB7
Signing time: Sun 10 Aug 2025 19:01:17 +0000
Manifest this update: Sun 10 Aug 2025 19:01:17 +0000
Manifest next update: Mon 11 Aug 2025 19:01:17 +0000
Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: b+kx7+rHzJ0TyV4GENOJ87BH7o+eWMZuDzyBX/exC/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:cc:31:26:b2:84:6a:77:48:f3:e6:fc:3e:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Aug 10 19:01:17 2025 GMT
Not After : Aug 11 19:01:17 2025 GMT
Subject: CN=9e822fa713af7fbbbd951b27b7ecc4d0885b101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:4f:9c:72:22:9a:45:21:58:a4:49:ea:ff:
41:e6:02:00:b5:56:08:cb:c3:c1:6f:d1:5b:40:86:
68:40:22:8a:93:52:23:da:2e:fc:cd:15:b7:02:fa:
99:9b:19:99:e3:6e:37:c3:73:7b:b2:eb:69:08:fc:
72:b3:ea:c8:88:30:80:14:20:89:71:b9:b9:60:61:
4f:04:f6:5b:df:84:0d:bb:59:16:ba:95:ef:7c:51:
4c:e8:d9:3f:9b:b7:98:55:9d:1e:c0:1c:fc:ef:0b:
71:82:f6:c1:9b:4d:41:78:9a:8f:45:75:de:5d:cd:
cb:4c:78:14:99:ed:6e:e0:36:85:01:94:85:36:3e:
de:7a:2c:c4:72:e5:be:bf:20:f4:ff:cd:79:c3:c4:
75:82:7e:a1:94:5e:8f:71:de:f8:75:0b:47:8e:67:
f4:3e:8b:18:41:20:e2:50:cb:39:b6:d9:87:6b:f2:
ac:2f:35:d1:d9:4e:e9:37:06:c4:bb:04:33:d5:68:
ad:34:bb:ee:b4:bb:c9:8a:df:4f:97:c3:5a:42:43:
e0:13:a1:73:bc:f8:af:bb:be:c5:01:0c:95:71:70:
f8:b4:8e:a4:fd:be:de:29:1f:2a:8f:72:f2:ab:89:
9f:c8:4e:01:87:3a:6f:3f:3a:0b:3f:c8:6c:2c:3b:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:2F:A7:13:AF:7F:BB:BD:95:1B:27:B7:EC:C4:D0:88:5B:10:1A
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:5f:be:e7:0f:3e:60:f5:5a:2c:2a:67:02:a4:32:46:4b:
a2:44:0e:39:ac:6e:0a:2c:4a:89:db:23:ef:88:89:a9:93:d1:
f1:9e:c4:d8:f0:69:2d:4d:9e:d1:9e:87:d7:dc:9f:48:25:ae:
d2:20:11:a8:80:a9:52:39:61:ca:58:d2:ff:42:ef:d9:be:5e:
e2:fd:fe:20:af:9c:4d:9b:dd:55:bc:51:21:33:31:1c:bf:3a:
5c:53:bd:94:e9:f6:3f:4f:54:15:d5:f8:83:c8:44:30:f8:b0:
e8:18:06:73:01:00:ff:f9:0d:a4:2b:04:5f:f4:4c:35:d3:b1:
8c:9c:39:3c:a3:2f:f2:a5:e9:19:10:cd:43:a5:f4:d8:fa:a7:
7c:e8:38:1a:37:fa:d1:3c:df:4d:a0:df:5e:5d:b1:fb:0e:96:
73:eb:ee:82:f9:09:99:17:4b:6c:2b:fd:de:cf:4b:8d:15:60:
60:4f:40:63:42:46:48:19:7b:90:a4:ba:65:2b:17:fb:49:b9:
36:9d:15:33:c2:e8:1b:76:db:17:82:02:43:09:74:2f:02:36:
11:9e:61:97:5b:5c:9d:bc:63:6f:b6:ec:2a:f0:f4:e1:0f:aa:
9f:3f:b0:59:b2:0e:61:a0:1c:f1:df:21:dc:6c:06:e2:7a:de:
74:45:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:55 2025 by rpki-client