Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: 35ZyW3x9iC0ro5LUR8t3RtIlt6FZpFiVuWWqsg9dcNA=
Subject key identifier: EE:DA:9C:7D:23:83:99:94:E2:8A:AE:A0:C9:BA:63:79:AA:AA:04:41
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01987373FBA55B1A5C0DCDD544DB8A57E2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0B33
Signing time: Mon 04 Aug 2025 05:00:37 +0000
Manifest this update: Mon 04 Aug 2025 05:00:37 +0000
Manifest next update: Tue 05 Aug 2025 05:00:37 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: lPFu/YXzmP7dvND/IWKr2gxI/5MzzJcuOEVqZx6ljww=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:fb:a5:5b:1a:5c:0d:cd:d5:44:db:8a:57:e2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Aug 4 05:00:37 2025 GMT
Not After : Aug 5 05:00:37 2025 GMT
Subject: CN=eeda9c7d23839994e28aaea0c9ba6379aaaa0441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:4d:6d:38:5f:d3:72:4b:94:5c:3a:a3:9f:
ee:a7:54:01:7c:61:9b:6f:fc:f3:0c:c1:a6:d6:38:
f6:ab:0f:7e:9c:51:11:8e:52:66:20:f5:38:9c:d2:
e1:71:41:75:62:79:f6:55:9c:9b:b6:ce:3d:d5:a8:
b2:fe:fb:51:2d:20:7a:22:4f:a3:d7:95:18:4c:53:
19:3a:a4:44:1b:dc:af:d0:8b:96:8c:32:34:5d:10:
96:09:58:c8:76:82:22:06:26:52:e4:c9:68:c0:1e:
16:fe:9a:8f:7b:85:a8:7b:33:e3:48:20:e7:5a:18:
08:18:89:cb:e1:57:d2:69:74:71:83:76:d0:bd:68:
e4:8c:39:be:ee:e9:7b:bc:b1:7e:10:57:c0:e0:ce:
5f:4d:8b:6c:92:e8:03:45:b9:88:fa:f9:7c:c7:00:
1c:63:11:45:4d:93:af:21:40:1a:82:a2:28:e5:c5:
f9:c9:42:04:96:a9:36:5f:74:98:e4:9e:85:d7:8d:
42:67:70:c4:c1:a4:0b:29:4c:42:e2:05:8f:b0:28:
11:73:a0:3e:b2:8e:53:6f:01:e8:43:18:e9:31:b6:
1f:49:f6:81:18:0b:f4:49:1f:3a:75:d5:58:c7:6c:
8a:d9:83:4c:4b:50:cf:02:27:cf:b9:2f:37:08:11:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DA:9C:7D:23:83:99:94:E2:8A:AE:A0:C9:BA:63:79:AA:AA:04:41
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:12:2e:6b:cb:80:d9:a0:ba:1b:f6:53:51:4d:d5:80:fd:aa:
63:68:cd:2c:c2:1a:7f:4a:00:d1:e5:b0:ed:42:46:2c:d2:ce:
f0:4d:ab:c6:3f:40:5b:ea:6b:00:c4:c9:0a:aa:1c:9c:d0:85:
1e:4d:33:fb:31:d8:d5:3c:f7:34:90:54:e8:a9:c0:89:6d:01:
7b:f3:78:2f:2d:84:45:4c:74:0e:60:73:9a:10:a9:9d:85:03:
4f:9d:4b:13:09:ef:12:f9:d0:09:0f:7f:ae:e2:4e:1d:78:cb:
fa:75:2b:24:8d:e6:bc:ca:5b:0e:13:60:33:fa:22:cf:c8:2a:
c4:6c:f2:a3:a1:c4:50:82:c0:c9:9f:f2:d9:90:fe:00:8d:20:
27:c0:de:ef:9c:c9:c0:bb:b0:6f:9d:c7:8f:29:88:f2:a5:ff:
73:ed:df:4c:e6:90:3a:59:87:da:60:1e:23:63:5f:ba:b8:d1:
3f:f7:d3:4f:2d:7a:70:46:a4:c1:be:0e:b7:8e:6c:73:7e:46:
cd:26:a8:91:3f:af:78:c0:93:7a:cb:da:31:ea:33:f1:f2:74:
33:c3:9f:35:0d:db:59:4b:26:ec:f2:1c:60:c1:b8:13:be:f4:
59:6c:cc:58:2d:24:1c:e2:7a:a9:d9:e7:98:8f:5c:ed:14:05:
67:0c:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:49 2025 by rpki-client