Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: dylUcO42gnp0wWmVn/aDabO3OJKOfxt/cCC6Xbz5PsQ=
Subject key identifier: B5:98:0C:91:7D:51:90:DF:52:34:EE:B4:BD:BF:8E:88:34:6C:4B:00
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 01989ECC7330C0F83245681E4AA9D7F61006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 15:00:55 +0000
Manifest this update: Tue 12 Aug 2025 15:00:55 +0000
Manifest next update: Wed 13 Aug 2025 15:00:55 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: SBjIsAEY5GA0YfNzNEJiWNMPgtHNcl5oLHhkjM1bLwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:73:30:c0:f8:32:45:68:1e:4a:a9:d7:f6:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Aug 12 15:00:55 2025 GMT
Not After : Aug 13 15:00:55 2025 GMT
Subject: CN=b5980c917d5190df5234eeb4bdbf8e88346c4b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:02:fc:08:f4:6f:4e:16:80:40:1c:1e:9f:
8b:d2:cb:44:2d:8b:74:51:b9:bf:cd:53:d7:e7:7b:
ab:44:19:1d:c9:45:10:81:90:a4:66:87:78:78:53:
d2:26:1c:68:33:28:6d:ad:5f:66:0b:ed:5c:04:89:
71:cb:88:4f:c1:a3:61:7d:4d:a0:2c:f1:11:e7:e9:
23:58:63:d5:ba:00:28:f5:fb:da:2a:ad:7c:22:f9:
03:e3:6d:27:35:6c:34:ff:4a:5e:78:a1:b7:8d:ea:
0c:d5:e9:51:9a:80:1f:5a:51:c4:52:ce:ab:af:86:
31:9d:08:79:94:a2:76:85:ee:f6:d6:f7:b1:81:84:
c3:8f:27:de:b4:5a:28:25:f5:28:ff:1b:3c:c2:c3:
d7:ea:d0:da:6f:1e:de:07:41:cc:33:59:18:ff:ba:
30:5c:94:7b:f6:87:6e:79:11:f8:03:89:97:af:8e:
97:66:b6:3e:fc:7b:85:0b:b6:d3:44:61:f0:54:3a:
77:58:d3:56:2e:31:4f:6c:5d:82:24:23:6b:ad:6e:
ea:03:a3:ec:28:65:39:32:bf:aa:6e:e1:84:43:13:
e8:7b:85:83:46:ac:df:8b:3c:43:70:a2:d7:51:d7:
38:5d:c2:fb:15:ee:f9:b7:02:9d:e1:15:33:80:1f:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:98:0C:91:7D:51:90:DF:52:34:EE:B4:BD:BF:8E:88:34:6C:4B:00
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ea:59:cc:9c:4c:a8:74:a1:60:a8:66:e4:fd:9c:f1:92:df:
c5:8f:b1:b8:8e:11:6a:ac:e6:f3:1f:8f:55:80:b4:e1:a5:00:
1b:58:ec:cc:f8:5a:8d:da:33:38:e4:19:8c:93:93:06:51:5c:
fa:e2:98:20:73:39:71:f4:87:02:a7:86:71:6d:da:2b:a2:05:
2f:69:b3:4e:9f:e5:bc:a9:40:9f:3c:22:00:d5:62:c9:a6:79:
ea:b3:99:5e:13:46:69:c4:32:66:2a:e6:04:43:8d:45:aa:0c:
3b:14:5f:d8:7f:03:39:7c:ea:9d:fe:8c:7d:ed:10:be:97:5c:
7c:13:af:b8:6f:b6:76:e1:a0:b1:0a:e0:95:a9:79:22:21:02:
9b:56:b8:ea:74:a0:35:dd:04:1d:b4:a9:f2:8d:15:f1:7a:14:
84:f5:a3:19:21:38:41:e8:00:cd:fd:20:38:f2:34:38:e2:f7:
df:88:fb:1b:a5:37:43:ab:31:d8:9f:ab:c0:01:da:3f:1d:61:
d0:e6:b1:8c:18:a9:9b:13:c8:6c:f3:ca:93:1f:af:75:ce:bf:
fb:2d:d6:2c:ae:02:4a:c5:da:2d:66:9a:64:f8:71:f9:36:6e:
06:8d:7b:63:55:da:d1:f3:a4:c3:13:ef:08:84:41:ce:de:5b:
45:64:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:56 2025 by rpki-client