Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: W/RW2jveOaMXsFkFEkg81CL6NbDNDS3POu+MFvyoX/c=
Subject key identifier: 96:1E:A9:84:2B:BB:60:31:41:06:31:AC:03:24:84:EB:9E:08:FB:BD
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 0198974A2B953F2A5756B5AF616D535137FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 34
Signing time: Mon 11 Aug 2025 04:01:17 +0000
Manifest this update: Mon 11 Aug 2025 04:01:17 +0000
Manifest next update: Tue 12 Aug 2025 04:01:17 +0000
Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=)
2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: vrl+kAVFgBvSdU8keNNFUHMlCizC+jOo+r4pZAzHwT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:2b:95:3f:2a:57:56:b5:af:61:6d:53:51:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Aug 11 04:01:17 2025 GMT
Not After : Aug 12 04:01:17 2025 GMT
Subject: CN=961ea9842bbb6031410631ac032484eb9e08fbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:39:40:17:47:4b:b2:b8:20:87:c9:26:83:
85:ac:95:55:23:f4:46:bf:58:7c:71:2c:59:bc:d7:
52:20:2c:87:01:57:a5:96:0e:a8:e1:a0:74:ef:1f:
36:e9:53:26:2f:69:36:3e:3a:1a:d6:1d:41:11:c1:
1a:67:db:34:47:fd:ad:26:79:85:43:71:ae:a6:17:
66:91:be:a6:41:aa:80:12:e9:89:fd:b9:47:d2:6a:
6f:14:62:a2:b1:e5:05:e1:4d:d0:cd:5d:e7:48:1d:
75:8e:d9:9a:2c:6b:f5:bb:32:cf:34:86:8c:16:c9:
6e:80:f7:bc:42:a1:d5:8e:95:6e:3a:cf:a7:c6:47:
f7:ba:4d:a8:4c:98:73:79:6b:e4:12:8e:fb:89:60:
31:7c:a9:a6:f0:29:f0:fe:71:94:f1:e5:b1:a3:bb:
0c:c5:57:da:0d:44:17:37:55:ea:e0:16:c3:32:95:
35:a0:0b:0a:37:96:14:06:ad:86:6e:0e:6f:75:5e:
31:a0:89:52:64:9a:ea:af:8f:0e:c0:98:b7:fc:a8:
53:a0:89:26:53:ec:17:84:ae:f5:af:c2:bd:f9:99:
91:36:3d:c2:38:b9:3f:52:54:2f:b2:bf:d8:fd:ba:
05:3a:34:2d:4b:fe:33:2b:1f:88:75:45:13:93:64:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:A9:84:2B:BB:60:31:41:06:31:AC:03:24:84:EB:9E:08:FB:BD
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:58:5f:a6:f0:9d:e0:1c:bd:f7:f0:b1:e9:05:02:68:85:8c:
cd:e5:84:3e:94:5f:1a:a5:c8:84:d1:70:06:9b:29:22:77:71:
1e:7e:a1:df:72:da:07:64:7c:3b:3c:86:39:0b:d0:f3:2f:81:
af:a6:a9:70:f8:3f:1e:0b:48:e7:7e:fe:06:26:f6:65:71:f0:
eb:74:42:93:31:23:c4:37:57:c1:b1:54:e9:d0:71:64:dc:54:
cc:fd:3d:99:8c:13:a0:b4:c6:ed:87:b9:8a:a8:fd:61:4d:8d:
44:e9:10:8f:c3:d0:92:2a:a8:20:a3:db:ed:06:87:cc:f4:c1:
f7:74:05:af:7d:7c:f0:c8:f5:ed:57:e2:0a:6d:6b:04:be:43:
e1:89:53:e4:92:19:2d:be:ac:46:c1:fb:8b:a7:4c:93:9c:28:
6e:7d:47:9d:2a:09:d1:10:de:27:df:e0:10:3c:04:28:46:dc:
de:f2:df:5d:a3:fb:31:61:9d:cb:ee:25:d9:97:6a:7f:0c:ad:
0d:c0:5f:91:48:71:a5:80:83:31:1e:9b:e9:29:34:98:67:ff:
52:c3:45:42:77:3d:75:35:e2:04:8e:7d:48:2a:d0:a2:62:94:
2d:ea:c9:fa:e3:1f:04:c5:96:bd:8e:bb:56:da:69:05:18:4d:
4f:43:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:05 2025 by rpki-client