Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: sFfn1hWTdhlu4H+zvDaM8odiszSZ4mophxqtkzIEPFg=
Subject key identifier: 43:B0:6E:8C:F0:DE:13:AC:C8:5F:21:FB:8F:60:32:D9:A8:9C:AF:40
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 01988E0F7B733AC6BE9590978C3534EB3C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 09:00:35 +0000
Manifest this update: Sat 09 Aug 2025 09:00:35 +0000
Manifest next update: Sun 10 Aug 2025 09:00:35 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: z+n8aWOFNQoXaIfiov1pc8R2jD18jjcgw3Q6BvmYJdA=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:7b:73:3a:c6:be:95:90:97:8c:35:34:eb:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Aug 9 09:00:35 2025 GMT
Not After : Aug 10 09:00:35 2025 GMT
Subject: CN=43b06e8cf0de13acc85f21fb8f6032d9a89caf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:2d:ae:4c:fb:7e:01:9b:7e:9a:c0:cd:1d:
db:cb:a8:ed:25:67:a0:e4:8e:16:e8:9f:1c:fe:29:
ad:bd:28:43:55:25:30:91:11:49:e6:8c:54:11:b5:
b1:ec:b9:bb:d2:94:3f:a0:b8:3e:92:57:4e:4a:4d:
c0:3c:45:f2:bc:69:97:18:e0:60:20:b6:36:3a:ac:
50:4f:fe:36:c7:e7:98:b7:30:64:f5:bc:78:de:f3:
37:9b:25:63:32:8b:8a:d8:7e:06:a5:26:c6:9f:2b:
bb:cb:aa:c2:44:26:5f:b5:d4:59:cb:c6:fb:cf:53:
23:82:f4:08:4d:d0:7b:0d:aa:32:0c:29:2c:15:d9:
69:3c:6a:3e:3d:4f:75:a3:b4:51:eb:94:1a:d9:88:
d4:c9:86:cb:84:3b:f4:20:66:61:53:70:fd:ce:43:
57:38:c2:11:8b:5a:7d:28:7f:fd:d7:15:11:bc:32:
e6:93:5f:7a:50:01:91:f6:b8:91:1b:15:ed:f4:72:
62:d5:b4:d5:a6:3c:33:42:92:70:ba:40:e4:bf:7d:
30:97:64:e0:a1:35:d8:fa:df:ad:d1:81:1a:d6:e5:
1c:dc:8a:02:24:3a:20:c9:a5:19:4f:70:74:06:4d:
b7:dd:df:ab:22:02:d8:5e:25:93:af:09:d8:ab:b5:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:6E:8C:F0:DE:13:AC:C8:5F:21:FB:8F:60:32:D9:A8:9C:AF:40
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:68:6a:81:01:44:df:fd:3f:e2:2e:6e:ed:d0:3d:d4:09:
b4:ef:cb:f3:b8:97:e4:26:55:9a:28:97:8b:e4:da:dc:03:9c:
60:8e:89:c1:b9:ee:fc:2f:2f:c6:ac:1e:9d:9a:66:5d:b6:0c:
35:3b:70:0b:96:0b:fe:aa:4b:23:d3:69:a6:01:0d:64:1c:90:
bc:44:83:60:cc:a8:60:10:24:50:60:ac:e8:8d:79:7e:f6:b1:
47:e2:94:e3:66:e4:91:7c:0c:01:fd:bb:ab:d8:e2:56:62:d9:
ff:3d:d8:97:11:e9:be:f9:f7:42:a1:6f:ef:ad:ed:c8:42:4d:
ce:df:58:38:32:df:3e:61:cb:fb:75:5c:bb:8a:31:a5:f7:04:
da:2c:d1:09:88:9a:03:87:69:44:d7:31:3e:51:00:dd:82:1d:
80:20:26:45:4e:f2:29:df:22:4f:6b:a4:86:5e:7b:f5:0f:a3:
68:67:10:31:b0:3b:b3:9e:92:f0:12:98:57:3e:92:5f:a0:5a:
86:ec:d6:83:9d:5c:9f:47:e3:34:0b:32:8d:72:cf:d8:46:ff:
38:15:49:c6:e5:76:7a:bb:6e:1d:cb:7e:b4:3c:91:fd:70:7c:
4e:a6:20:4f:17:93:35:01:5c:75:81:23:e5:04:b4:a8:6f:e1:
d6:cf:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:27 2025 by rpki-client