
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: shUwi7wbW2pqo7QJya1AvRFurW0oywEcIFpsoM3L33Q=
Subject key identifier: 52:71:07:ED:C2:D9:76:C3:C6:64:55:C2:23:EE:B5:10:EB:7F:D0:22
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019889218A99F4FA65CBEFDFB35B3B9EF6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 148D
Signing time: Fri 08 Aug 2025 10:02:13 +0000
Manifest this update: Fri 08 Aug 2025 10:02:13 +0000
Manifest next update: Sat 09 Aug 2025 10:02:13 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: Fn4xAyQnHXEuG/SmFgxW7vta0EXtm7RC5AHtShX+iqk=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:8a:99:f4:fa:65:cb:ef:df:b3:5b:3b:9e:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Aug 8 10:02:13 2025 GMT
Not After : Aug 9 10:02:13 2025 GMT
Subject: CN=527107edc2d976c3c66455c223eeb510eb7fd022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:82:a4:6d:71:2a:bf:77:60:8d:4e:5a:1f:
df:1d:36:cb:ce:c9:83:ea:4e:90:2c:2b:f6:c6:0f:
53:75:8b:18:b5:21:03:24:04:6f:eb:30:8a:5d:5a:
80:6f:4e:58:95:cd:a9:44:76:8e:6a:81:45:df:a5:
9a:99:97:3c:e3:c9:63:0e:5e:c6:a3:e7:9f:f6:da:
2c:dd:08:33:dd:95:ef:6d:df:48:f6:fe:37:e6:8b:
ab:12:db:d0:7b:b7:b9:4e:a1:32:c1:8d:93:07:0c:
b3:30:03:5e:35:ec:5b:43:45:0c:c7:de:a7:2a:fd:
5d:7a:80:e9:87:cc:53:92:72:89:b9:ed:33:bf:a8:
a3:8c:5c:8d:b9:b0:aa:51:de:29:1a:fd:3e:ae:9e:
fb:fc:08:1b:84:28:95:d3:0d:db:6d:ae:ba:e8:70:
d4:25:7c:51:53:b5:e1:93:3f:2f:0d:aa:b9:e2:1e:
1b:e8:0d:00:72:ea:55:76:c2:07:06:9b:c0:e4:2f:
9d:4d:5f:48:be:b0:f9:17:a1:3b:db:75:8f:ba:e9:
55:b2:bb:c1:92:eb:15:d1:f6:21:0d:33:29:9c:f5:
09:78:e8:a3:bb:ad:a6:51:c0:fb:ce:ce:c3:0d:5a:
72:d6:2f:37:4e:e4:f2:f9:5d:fc:1d:c7:cb:9b:67:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:07:ED:C2:D9:76:C3:C6:64:55:C2:23:EE:B5:10:EB:7F:D0:22
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:3a:94:98:15:43:b4:09:86:8b:ae:36:0d:95:70:9e:df:
2d:e9:04:85:2d:0a:e5:11:ea:28:bb:e7:05:33:60:ee:3e:3c:
1e:dd:f5:52:92:02:bb:00:e2:74:c1:5c:a1:a6:d9:6d:8d:ef:
0b:d2:05:b2:a3:53:97:54:d5:11:2b:ba:b6:ec:64:af:00:4a:
81:aa:5b:e1:fb:35:81:c5:e8:e7:92:5f:07:0f:58:ea:c2:37:
77:fa:4e:ef:7c:ed:28:17:c4:eb:92:bc:00:55:11:82:28:40:
fd:91:6e:00:dd:a2:21:2a:d7:1a:8b:85:5f:75:1d:a1:e8:91:
a8:30:7d:1f:3b:d0:5c:0f:5b:d0:d3:20:cc:9a:de:54:a5:e8:
75:d5:b0:ea:e0:2a:83:31:52:e4:f8:16:78:33:a8:69:ad:27:
2f:11:fd:2b:fd:06:6e:66:69:3e:eb:25:92:87:2e:bb:bf:59:
3f:15:2f:2a:ae:d7:5e:f4:e1:f1:3e:24:17:31:4e:63:ec:98:
4c:ef:e7:28:3d:86:d2:49:37:f8:91:ff:86:1d:40:55:52:46:
e7:6a:90:6a:4a:f4:ba:85:1a:54:93:52:ab:45:97:55:fc:9d:
fc:bc:02:e2:83:0b:1d:0e:2f:85:8a:ed:12:6b:f1:d5:a8:cb:
f8:cb:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:12 2025 by rpki-client