Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: Ham9vbYhWzIu8SPV9bBs5y9LgSl/2YgDOyy071VuqIs=
Subject key identifier: 79:3C:05:60:C3:89:22:83:6D:46:BD:09:33:D3:D6:3F:4A:C5:2B:61
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019897497C71315DD2B9A286E9CEB3E8C848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 04:00:32 +0000
Manifest this update: Mon 11 Aug 2025 04:00:32 +0000
Manifest next update: Tue 12 Aug 2025 04:00:32 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: nYOToKreb12jGKtIMukn5G1bmYLsxRKxJ6Atl3D3u3M=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:7c:71:31:5d:d2:b9:a2:86:e9:ce:b3:e8:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Aug 11 04:00:32 2025 GMT
Not After : Aug 12 04:00:32 2025 GMT
Subject: CN=793c0560c38922836d46bd0933d3d63f4ac52b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:12:cb:22:38:d7:11:7c:17:d3:29:d8:f2:
32:8b:f2:09:bc:c0:71:8a:8c:c3:83:fd:1a:8d:67:
e8:42:2e:07:9b:e7:a2:a2:4e:a9:c7:60:3a:85:3c:
e6:93:73:74:e6:90:d0:28:26:43:59:52:e8:09:b4:
aa:80:b3:37:b3:0e:6e:00:69:c7:50:0e:df:37:d8:
be:bd:d8:4b:8c:9d:ab:5f:47:a5:e2:23:f2:be:05:
e7:f2:dc:75:9f:8f:38:5f:c1:7e:df:17:0e:85:b1:
b8:28:9a:ba:13:7c:3b:d4:ad:52:41:e1:52:1e:ba:
40:86:99:51:a4:22:37:ff:f0:88:c5:9a:e7:66:06:
77:d6:c8:b8:9a:62:de:f4:f8:64:7c:cb:5f:38:10:
1e:aa:38:1c:da:70:25:49:80:ad:d4:69:d5:1d:61:
25:ca:e7:15:4b:be:83:81:24:3c:8b:c7:69:9a:6e:
e1:ea:25:d9:69:99:b2:53:8e:95:34:d6:69:30:c1:
90:fc:a3:14:71:37:0e:e8:96:d2:78:d8:8e:34:7d:
55:ec:03:34:a2:a2:b7:62:e9:09:f0:d9:ea:e9:ca:
46:bb:e1:37:6e:6d:7e:a6:56:14:b1:33:70:7c:f2:
75:21:57:f2:dd:38:69:8d:96:b4:99:46:7b:50:ec:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:05:60:C3:89:22:83:6D:46:BD:09:33:D3:D6:3F:4A:C5:2B:61
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:ba:05:6f:9e:f7:5e:4d:9d:86:71:8a:b9:45:44:cb:38:
49:92:9a:01:4b:aa:7b:9c:d5:57:fc:cd:f9:2f:09:0d:77:16:
72:ac:e9:13:3b:20:69:c2:00:38:f7:25:f6:1d:54:39:07:75:
22:d5:5e:11:6b:b6:69:1b:bd:9d:a4:b9:09:f4:f9:1a:de:35:
4c:6c:a9:b1:64:6f:f9:04:78:7d:7d:b0:62:d9:f7:4d:cd:ea:
df:df:48:c2:d8:38:29:db:8f:dd:25:49:2b:e1:64:21:38:ad:
c2:2f:e4:0a:13:39:16:d9:e5:da:6c:05:ae:e1:52:31:7f:11:
f9:80:d7:a4:0b:10:c5:28:02:a7:df:ca:6f:09:4d:65:6f:43:
c3:fc:8b:62:57:fa:58:02:26:3f:9b:96:41:f2:e3:d1:93:25:
9d:ba:1a:ca:14:e5:eb:7f:bb:cc:a3:9b:b1:50:49:be:fd:1a:
43:07:00:21:78:72:b1:65:1b:05:7a:a7:b7:f5:5c:cd:02:52:
e7:74:dd:16:2d:e8:9c:8a:7e:c9:4c:9e:6a:f9:a0:d5:c3:43:
56:5c:1f:f2:16:12:cd:6d:82:1a:d7:04:c1:e4:4e:c0:b6:58:
a1:a4:78:eb:4a:b2:5e:89:cf:39:4b:7e:04:d8:d0:40:34:69:
96:1c:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:29 2025 by rpki-client