Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: 5h15l/R/pVMkRGByvvK5CP9K6FpQSTCkPGC/FD04Mo8=
Subject key identifier: B8:A6:A5:CE:D9:2F:D5:B1:49:14:87:17:86:BA:44:CF:00:23:CD:F3
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019874BE98D13A3726C25A527F81AFF4454D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 139C
Signing time: Mon 04 Aug 2025 11:01:44 +0000
Manifest this update: Mon 04 Aug 2025 11:01:44 +0000
Manifest next update: Tue 05 Aug 2025 11:01:44 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: sBuQLFC2MrLCHfOoJH/3f9jy8dKDM7we091VhLF6yGc=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:98:d1:3a:37:26:c2:5a:52:7f:81:af:f4:45:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Aug 4 11:01:44 2025 GMT
Not After : Aug 5 11:01:44 2025 GMT
Subject: CN=b8a6a5ced92fd5b14914871786ba44cf0023cdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:d7:21:fb:8d:71:83:2c:e3:23:e7:79:d2:
e2:0f:56:9a:44:be:78:ee:35:ba:c6:6c:b8:52:9f:
a6:03:b6:a2:ca:6c:1a:e2:74:5e:13:58:f9:13:8a:
03:e0:bf:ec:a6:84:53:1f:cd:70:2f:83:5a:3a:30:
77:70:b0:99:4b:8e:a9:b9:9c:19:d0:1c:5c:2d:9c:
50:f2:dc:56:52:4b:e2:77:88:6f:34:eb:36:f4:97:
df:eb:5e:28:aa:23:fb:d1:e9:c1:b9:2c:f4:42:b7:
6c:b1:2c:50:9c:f4:9b:a4:f2:2b:9c:fb:99:9c:e0:
75:33:07:2a:b1:84:b2:95:7c:f0:8a:8b:e6:74:48:
95:89:6f:a9:97:68:4c:f7:39:38:de:97:67:58:5a:
16:bc:70:d9:a0:f9:ee:06:bd:3e:63:86:4e:57:fd:
68:ff:73:52:e2:cd:1f:d9:51:00:89:62:f5:9c:25:
46:87:34:4f:0f:42:43:7f:60:36:a6:8b:3f:41:b4:
34:2b:2f:d6:84:15:f0:ab:f1:71:84:12:2c:df:c6:
21:c7:de:15:74:b5:58:a0:d2:e5:e7:82:ca:f9:bf:
f4:4e:56:79:0b:65:30:8a:77:36:73:43:e4:cd:15:
53:c8:c4:d2:b1:f7:c0:7a:b0:29:06:57:f7:15:b2:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:A5:CE:D9:2F:D5:B1:49:14:87:17:86:BA:44:CF:00:23:CD:F3
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:87:03:a7:33:b7:60:20:34:17:26:55:dd:fc:fc:3b:ec:
b1:67:8c:a7:83:3b:b7:f8:7e:a2:ba:43:c6:4c:50:c7:08:50:
5b:f6:d6:40:38:02:54:4e:b6:25:61:83:ec:51:d4:ae:85:92:
8f:c8:c8:a7:d7:50:f5:36:33:f2:9d:03:7b:04:50:c2:e0:7c:
a5:67:74:8d:9c:1a:58:12:82:84:44:24:e6:1f:36:06:7b:46:
90:3d:3a:ab:b9:80:80:4c:25:e9:b7:c8:6f:7e:a6:f1:4d:2d:
7e:22:2a:f8:33:30:47:3b:10:77:dc:bc:32:a9:84:2d:fd:78:
68:6d:08:78:43:4c:cf:08:3e:a0:95:6e:86:77:28:9f:c7:e7:
d1:8f:f4:f6:8f:e2:ce:f7:2f:21:0e:58:e3:c4:66:bc:cf:ed:
84:53:be:0d:d5:08:72:d7:c9:b5:47:a7:a9:00:e1:fb:f1:b8:
bb:f0:55:25:f6:98:af:e1:78:97:a6:14:fc:09:b5:ce:5b:bb:
44:88:54:07:26:e2:4b:40:dc:df:d6:9c:73:a4:67:cd:7b:9e:
57:ed:94:38:59:97:67:de:e0:36:c7:5e:0c:39:98:49:cd:ff:
12:84:11:a0:37:a4:29:c2:0f:69:b2:22:ee:84:9c:66:b6:8d:
3d:b9:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:00 2025 by rpki-client