Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: JK7Jb26nWq2e89T3DpqZAUh7KVQgVy4eib17SabRo0c=
Subject key identifier: 87:49:44:21:F8:96:A1:7C:D7:D8:82:2F:6D:0E:7D:34:B7:4C:DA:EE
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019874869BF0BB4CE0B92BE6F5932505D022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0668
Signing time: Mon 04 Aug 2025 10:00:35 +0000
Manifest this update: Mon 04 Aug 2025 10:00:35 +0000
Manifest next update: Tue 05 Aug 2025 10:00:35 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: V5DKY9a2Rl6erydTUiHOOechSFJKjIP6uhJb2VaMnjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:9b:f0:bb:4c:e0:b9:2b:e6:f5:93:25:05:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Aug 4 10:00:35 2025 GMT
Not After : Aug 5 10:00:35 2025 GMT
Subject: CN=87494421f896a17cd7d8822f6d0e7d34b74cdaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:91:47:a2:16:f6:ae:13:c8:60:7d:6b:47:
8d:c8:3f:37:d4:45:f8:6b:b4:a6:51:85:f4:f9:12:
5b:f7:ff:e5:a2:a1:98:56:fb:3f:75:c1:4a:e5:97:
00:7e:82:fb:1c:6e:04:5c:c8:e1:8b:a0:77:b9:2a:
09:84:0a:0e:df:cb:eb:b6:2d:51:1c:7e:20:f9:6d:
f6:80:45:ec:1a:96:e1:3d:f7:1a:2a:3c:2a:69:63:
8c:69:8d:c0:57:b3:df:a0:54:bc:33:b5:f4:30:4d:
ad:92:8d:68:bf:10:a2:56:a2:6d:92:e0:48:24:67:
b9:00:76:a2:c2:e7:04:00:c9:bb:b1:6c:9c:eb:a4:
b1:f7:06:52:61:01:de:cf:1e:84:f5:e8:e2:ad:30:
9d:92:e9:a7:17:00:1e:f7:33:d8:22:9e:da:0a:99:
f6:10:ff:eb:0b:e6:c7:76:a7:20:1c:51:36:79:8d:
94:db:20:61:a8:a3:77:a7:8d:b4:6f:a2:ad:ea:e7:
0e:e6:37:26:cd:8d:67:43:3e:e0:fa:ce:c6:cb:56:
f7:5c:6e:0e:11:41:78:56:69:c1:92:68:4e:05:da:
79:99:0a:8b:1c:85:ea:73:22:ed:1f:e7:49:84:8d:
e5:2e:81:2e:31:c8:1c:ec:13:63:e7:41:28:16:5d:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:49:44:21:F8:96:A1:7C:D7:D8:82:2F:6D:0E:7D:34:B7:4C:DA:EE
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:65:42:22:8c:9a:4e:b9:c2:70:56:bc:9b:6a:32:4b:f0:
50:5e:3c:db:cf:b4:a6:7a:4f:22:93:2e:75:f3:95:52:ad:11:
9c:7c:30:27:0c:0c:8f:4e:d2:34:c9:cd:d2:8d:93:e1:ff:73:
e4:fa:7f:c6:5c:8a:ab:4f:90:88:fa:1a:fa:73:b6:83:01:6b:
bf:08:5a:5b:14:09:0a:a2:a2:13:43:d2:51:76:a8:21:fb:bb:
97:ca:82:f8:56:dc:7a:d5:7a:e1:b8:86:56:f0:ad:dd:be:ea:
30:2c:73:08:f1:99:60:6e:13:d8:e5:89:5a:d4:93:ae:26:b9:
57:50:99:0b:c0:a6:25:e3:b2:7b:b3:70:f5:22:9a:39:e8:97:
3e:ff:6a:98:09:d9:13:0c:fb:10:9d:82:fe:8f:15:17:8f:44:
df:d0:e9:d8:cb:ea:89:5d:2e:04:ab:d8:1b:dc:a9:3c:5d:49:
03:0b:ea:97:db:b4:20:5c:93:1a:7b:d8:c7:fd:33:1c:eb:e2:
f9:11:b0:63:3a:6a:fc:a7:b4:80:3b:85:ce:a9:58:54:a6:b4:
54:a3:ab:69:49:b2:d6:2b:e6:f3:4a:ce:41:e1:f3:7d:60:76:
1c:e4:7a:a5:24:06:6b:ce:c9:21:26:f2:65:4b:09:6d:c3:fa:
49:11:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:58 2025 by rpki-client