
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: 6/PBXrFabDWAFVgZQ8Q+mlbmPuIlAK9E9TWdu1HuYHE=
Subject key identifier: 44:3F:F7:3B:DC:06:F8:B6:88:5F:0F:CE:3E:5D:D8:EF:C8:81:E1:58
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 01988FC7A023EF2D4BA2EF9CCEE73B21CBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 17:01:21 +0000
Manifest this update: Sat 09 Aug 2025 17:01:21 +0000
Manifest next update: Sun 10 Aug 2025 17:01:21 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: odnLYYoCtEaDzW63NWjNwSpKAafjxyhV9Vpo5eUdHMk=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:a0:23:ef:2d:4b:a2:ef:9c:ce:e7:3b:21:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Aug 9 17:01:21 2025 GMT
Not After : Aug 10 17:01:21 2025 GMT
Subject: CN=443ff73bdc06f8b6885f0fce3e5dd8efc881e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:e8:fb:6a:25:6d:eb:08:c7:a6:88:78:68:
a9:2a:9e:95:cb:5c:7a:ef:ec:dd:b6:5b:f3:4e:32:
3d:99:c3:28:c9:a5:63:ee:b5:c7:cc:0b:3d:01:63:
e9:76:c5:aa:07:22:2a:b7:f1:49:e4:5d:f2:b1:75:
1c:ab:95:77:b3:dd:e8:ce:a1:91:90:8e:cf:22:bf:
61:0c:c4:8d:b2:2e:09:02:23:e7:5a:5c:24:d7:11:
58:de:9e:d9:5e:5d:19:b8:7c:92:20:cd:d4:41:7f:
64:d2:9f:f2:f2:28:f7:f8:2e:d6:3c:20:12:2d:4f:
68:97:01:51:c8:8a:ce:32:a6:b3:93:a5:4f:0a:89:
89:58:eb:b8:ec:44:83:3a:fd:ec:03:df:d5:37:85:
6f:e9:ac:8f:e2:4f:44:6b:18:f7:48:26:d6:79:39:
dd:8e:84:c7:58:e5:b3:23:51:10:92:e5:2e:a2:ea:
d5:10:09:d7:08:03:5f:a4:3b:49:d8:22:41:97:1a:
f6:27:22:b2:3b:8a:f1:5c:cb:7f:38:e1:49:94:d8:
f2:94:14:0d:75:fd:40:1a:a9:bf:9f:90:ac:e6:0c:
38:0a:90:24:a6:7a:65:0c:6f:e0:fb:a4:99:c8:05:
20:93:93:01:d8:97:de:d3:5f:d3:fc:97:11:ad:24:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:F7:3B:DC:06:F8:B6:88:5F:0F:CE:3E:5D:D8:EF:C8:81:E1:58
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:09:c6:a5:44:51:20:ec:ca:23:a1:53:6d:5b:a1:5e:36:10:
cd:0a:17:62:6f:03:9a:b6:72:2d:06:ff:ac:2c:70:ac:e5:35:
f8:15:2b:a7:de:c2:e0:db:e8:12:f9:e6:0a:36:80:bd:75:ab:
49:92:b0:03:c9:41:58:5b:5c:03:d4:40:2f:86:10:0f:12:b1:
a3:14:92:9d:eb:74:6d:a4:95:46:4d:8f:0a:32:f2:c2:1f:2b:
6a:d1:8e:2f:45:e5:73:0f:e9:ce:76:42:ff:51:a7:52:9b:da:
1f:23:b6:3a:f8:52:b8:11:40:96:a1:d6:3e:17:82:c2:e9:f0:
97:f7:45:c9:be:3f:8d:44:ab:5d:d9:8b:c8:12:d9:7e:ff:54:
89:a9:77:e0:a0:e7:72:96:d0:81:58:05:ed:d1:60:4a:a4:cb:
0d:08:ea:44:ad:42:bf:9e:d6:37:92:22:ac:12:c8:b5:3c:73:
4a:74:a6:e9:b6:ce:a5:65:01:fc:a0:14:52:05:68:f3:f1:da:
a3:db:e3:40:5d:aa:47:e2:ad:53:25:79:05:3b:cd:4a:3a:fa:
53:5a:bc:b4:d8:16:44:4d:84:c5:44:24:12:9d:be:73:91:7e:
f4:ec:59:ae:c9:df:5b:46:34:e3:65:4d:71:7c:fe:30:8d:0a:
9a:d8:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:12:52 2025 by rpki-client