Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: tRhDEp4xcbRRPDtUTwWfr2N5ZzRTeJxrGVo92ZzsnWc=
Subject key identifier: DD:A0:63:6F:F5:D1:0C:07:33:8E:5A:69:CC:3C:AD:D0:1E:BD:7D:2C
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019880F8DEF04828F6245E69DF1A8856C575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 14F6
Signing time: Wed 06 Aug 2025 20:00:50 +0000
Manifest this update: Wed 06 Aug 2025 20:00:50 +0000
Manifest next update: Thu 07 Aug 2025 20:00:50 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: OstDM3vmtBg6e6Z2gEdvRyGPMHRmF+qHWnzdDGrm9Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:de:f0:48:28:f6:24:5e:69:df:1a:88:56:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Aug 6 20:00:50 2025 GMT
Not After : Aug 7 20:00:50 2025 GMT
Subject: CN=dda0636ff5d10c07338e5a69cc3cadd01ebd7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:69:dd:61:c5:cb:ff:3e:ca:0b:60:11:6d:
39:23:cf:41:56:83:8f:02:8f:f3:a1:e1:4d:25:e9:
f5:1e:8d:d8:49:ee:a0:e2:73:13:54:8d:e1:8c:53:
66:0e:13:b2:db:1d:99:e4:6c:f2:34:23:66:55:28:
7d:a4:28:19:44:cc:0b:78:c6:f0:9f:a9:c7:c7:8a:
45:0a:62:80:12:b4:35:42:bc:fa:b0:79:d2:47:5f:
2a:70:00:5f:8d:cb:ca:7c:bc:6c:0f:1c:7b:2c:80:
9a:b1:73:67:38:91:c1:20:62:22:4a:e8:b4:45:8d:
f9:f5:2b:97:fb:eb:94:39:d4:10:9f:f2:93:86:43:
47:d6:bd:e7:f2:a0:de:82:de:dd:48:9c:df:fe:bf:
6f:d1:d2:10:28:2f:36:06:d4:3a:d0:f2:1f:ce:1c:
1c:c9:da:21:ad:5c:cf:74:c1:10:72:50:7a:39:57:
c3:fa:30:96:dc:fa:1f:47:64:b5:e7:64:cb:dc:f1:
54:17:60:25:2a:73:47:4d:39:9f:4a:18:e2:b0:c5:
21:b7:87:9f:94:96:70:f6:e8:26:3b:3f:b5:a1:f2:
4b:67:da:82:87:98:5f:b4:8e:97:ed:4d:a3:5a:3a:
51:81:29:bb:c7:fa:e7:44:46:18:60:47:00:b0:54:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:63:6F:F5:D1:0C:07:33:8E:5A:69:CC:3C:AD:D0:1E:BD:7D:2C
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cd:3c:8c:0f:26:42:b1:3c:9a:6e:f0:79:90:8e:c0:0c:a0:
f9:c9:6d:6a:7f:9d:fd:6b:e1:1b:c4:ee:49:74:25:63:94:ee:
e3:50:be:23:45:45:ce:1f:89:56:3f:25:e2:9a:1c:f8:d4:be:
db:ca:66:20:51:f5:9e:bc:4f:ac:ad:78:2e:34:94:a0:16:d7:
50:92:6a:d9:24:db:58:57:85:27:ae:a5:2d:08:00:a3:da:99:
7d:06:d0:61:67:91:ba:1d:ca:ca:c9:d1:77:0d:a0:ac:f4:1c:
0c:47:cd:59:68:32:77:49:49:23:3e:46:13:9c:c9:93:37:8f:
96:af:da:b3:c4:82:13:61:30:31:00:6a:e2:19:59:25:df:a4:
5b:c3:81:6b:ec:a6:9d:77:a9:f3:4a:29:e1:89:09:08:1b:2d:
ae:41:73:75:23:3f:06:70:57:d1:be:66:94:85:3e:02:df:74:
26:87:88:87:eb:69:5f:67:e8:97:04:41:ca:54:b7:c5:b9:d2:
d1:ad:69:49:18:6b:94:a0:24:8f:11:6a:f0:da:ac:e1:da:e9:
10:1d:16:f1:bd:3d:6d:21:e4:b8:82:00:9e:15:7c:b9:08:79:
95:fa:3d:ca:a9:8c:a0:cb:c2:dd:06:34:64:2d:10:21:72:52:
51:d2:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:44 2025 by rpki-client