Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: vix6xGVxUVUFYOpydG8wJ5YFo6TmrwyiUEHvsMo+E+0=
Subject key identifier: C4:7F:C0:85:7A:F0:B4:04:0C:DB:59:EB:F2:2F:99:12:77:2F:95:07
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 019880F8C4236B8B814209C1ACF8094B48C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 0211
Signing time: Wed 06 Aug 2025 20:00:43 +0000
Manifest this update: Wed 06 Aug 2025 20:00:43 +0000
Manifest next update: Thu 07 Aug 2025 20:00:43 +0000
Files and hashes: 1: 7RtSvYvJ-s26z4jJmihBpc9PPTg.roa (hash: +WPL+eLMOyDQbtRDqabesCoaqYzO2nUYgvkky6oLihM=)
2: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: jIvAw6NFYPniG+G9AM+3+bSyvC5Rdjdkni12OCa71pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:c4:23:6b:8b:81:42:09:c1:ac:f8:09:4b:48:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Aug 6 20:00:43 2025 GMT
Not After : Aug 7 20:00:43 2025 GMT
Subject: CN=c47fc0857af0b4040cdb59ebf22f9912772f9507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:cf:3e:86:51:45:ce:8c:bd:34:d7:14:2c:
f2:a9:7c:c8:38:a9:22:07:a1:98:08:e5:41:d7:bd:
d6:0c:9a:37:9b:00:5c:4f:1c:1f:31:59:5d:2c:de:
c1:0d:25:64:d3:ff:2a:af:9b:e8:77:60:c8:fb:f3:
0b:b2:27:2a:3b:90:e0:81:60:a7:80:f3:c0:1e:10:
6d:65:73:a2:92:c5:2d:fc:01:49:dd:0d:ab:3d:3a:
cb:02:c8:03:57:a0:2a:b3:3a:0b:e8:65:5e:ba:54:
f5:e4:56:94:fb:f0:fe:6f:07:4d:cb:51:6f:20:dc:
75:dd:ea:bc:e8:87:de:80:6e:b2:bb:fc:13:d1:5b:
94:c4:17:0f:cb:04:3d:8f:e9:7c:79:19:7b:16:a9:
7d:cd:c1:48:7d:90:46:28:31:ea:dc:a2:21:03:b2:
c9:4f:1e:54:f5:d3:54:3f:d4:e0:3f:89:cf:12:a6:
27:f6:70:f7:f4:35:24:75:b2:9f:32:b4:b8:e3:32:
c0:2b:86:a1:76:e2:79:f9:b0:6c:45:61:f3:1e:e7:
3d:96:56:0a:bf:58:82:e4:c8:11:a3:4a:06:e4:e7:
93:0a:70:48:52:ef:06:ef:e6:b7:47:f1:9f:8b:dc:
38:14:1d:7b:3c:0b:90:8e:9e:22:14:6c:41:7f:cc:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:C0:85:7A:F0:B4:04:0C:DB:59:EB:F2:2F:99:12:77:2F:95:07
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:a1:9f:46:de:1f:ad:60:40:90:5d:3c:0e:54:dc:77:6d:
3b:6e:ba:43:a8:22:9f:1b:6f:7c:7c:7e:fe:73:f7:d3:4c:b8:
e2:7f:a7:b8:a5:14:b9:12:0e:6b:31:e3:0d:b4:e0:2e:28:0d:
eb:1c:7c:93:b2:7c:87:2d:5b:62:b5:08:6e:97:c5:2f:d5:37:
9a:d8:7a:f0:62:fe:2f:76:ff:4e:dc:e3:75:bb:f8:34:65:c1:
d5:93:bf:fa:d4:52:fb:fc:94:3a:b3:e5:f8:f5:1e:26:0f:44:
f5:7d:78:8a:6a:75:f5:0f:10:b3:fc:a5:ee:bf:1f:c3:5a:3f:
27:1b:2e:bb:d5:f4:43:bf:a1:55:a5:14:99:34:ed:7d:1f:c9:
40:59:c3:8d:fb:52:67:41:5b:14:29:d7:a8:af:9f:4b:f0:a1:
c1:e3:ef:f6:e7:e0:d3:0f:50:1b:f7:a3:81:a5:20:ad:bd:2e:
c3:8a:75:71:c7:05:7c:e5:72:10:d2:56:f6:5b:2e:eb:24:ae:
b8:60:b3:a7:03:60:5f:25:93:07:00:af:c6:17:7b:e6:ba:ba:
35:17:91:60:96:00:1b:ab:c1:33:41:fa:d7:05:c4:d1:62:35:
97:32:53:fe:09:99:f1:e9:e1:10:e6:85:a6:17:5a:51:f8:ec:
3d:b8:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:14 2025 by rpki-client