Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: t+QbHe/xCgA/ZNBEUyx1V2K+g0wArrkfkI1PJkg3pTk=
Subject key identifier: 98:B1:B4:A9:A0:8E:34:56:F1:C4:32:B8:B0:D5:1E:8F:59:BC:75:1F
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01988CFDCB42177DC39B580C91743D6D4D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 10AF
Signing time: Sat 09 Aug 2025 04:01:39 +0000
Manifest this update: Sat 09 Aug 2025 04:01:39 +0000
Manifest next update: Sun 10 Aug 2025 04:01:39 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: WIXgDZPUkgXDGwGR+7lh/9IiIgLxaUJU1UCTmsAjcBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:cb:42:17:7d:c3:9b:58:0c:91:74:3d:6d:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Aug 9 04:01:39 2025 GMT
Not After : Aug 10 04:01:39 2025 GMT
Subject: CN=98b1b4a9a08e3456f1c432b8b0d51e8f59bc751f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:1a:ef:9b:95:ff:f5:40:0f:7b:fc:1c:3b:
03:f4:33:51:7b:b1:15:04:83:bc:8a:66:5e:42:b9:
d1:4e:82:90:a8:ad:6e:e3:62:36:d9:03:b3:8e:a3:
2a:dd:00:80:2e:b8:26:74:77:b5:f2:42:74:9f:5e:
18:9b:be:2e:44:9f:64:92:2f:47:09:51:92:95:82:
9f:44:a8:39:c4:36:9e:78:c7:d7:7c:57:ae:67:23:
6e:95:81:70:84:35:f1:8b:ac:74:09:da:d3:fc:5b:
88:1c:50:46:53:7f:38:cd:15:bc:62:e9:a7:8e:df:
9e:b7:7f:d6:1f:a9:00:c9:d2:a1:07:54:9d:a9:44:
f7:bb:cf:b2:10:9d:bc:18:92:48:00:fd:8d:67:23:
6d:4e:18:ca:a9:56:0b:33:b3:40:6b:bb:b1:b6:11:
e3:99:47:7c:45:38:85:4e:f2:c0:8b:2e:32:5f:db:
3e:71:30:11:11:eb:f5:e4:f4:e5:fc:d8:77:d9:56:
d8:34:9d:26:ff:82:e7:1b:ea:70:f4:57:38:38:1f:
c1:13:5e:be:8f:f7:98:66:d3:2b:41:b8:10:ac:95:
0f:c2:f0:76:e2:72:42:b5:5d:2d:94:d4:c0:11:c9:
c6:2a:38:46:62:42:d4:2f:89:a1:36:43:6e:b9:a3:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:B4:A9:A0:8E:34:56:F1:C4:32:B8:B0:D5:1E:8F:59:BC:75:1F
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:96:62:75:3b:a3:b5:79:62:e5:47:9f:10:3a:e6:1f:45:
a0:38:93:7d:d5:72:f5:a1:cb:1a:e7:36:0d:cd:58:a1:b8:6a:
51:2f:81:92:8f:e2:4b:83:92:36:14:6f:4c:5a:71:bb:48:40:
16:98:9f:ca:da:7f:81:35:a0:1b:c0:8e:d9:e6:a7:c7:ca:e6:
73:a7:8a:5b:98:37:96:44:8e:6a:4f:30:30:18:3b:76:89:ff:
6e:75:b5:1e:42:a9:11:92:96:d8:74:5d:f9:35:cd:58:a6:ae:
de:24:97:c5:8b:9a:29:44:27:ca:ba:3b:5b:16:21:18:a8:5b:
6e:44:b2:05:d9:41:58:36:f7:96:a4:79:ee:2f:ea:a1:be:8a:
a7:44:64:89:f4:fb:9c:be:45:bb:20:36:b2:cb:c7:e6:8b:ea:
61:fc:b5:77:50:d4:29:33:b3:3a:b6:2e:19:cc:ca:e3:cb:ef:
f8:15:d0:6e:b8:ec:65:4b:a8:5e:27:84:68:dd:96:89:00:70:
a6:0f:ab:9e:76:4f:5d:fc:d4:fe:1e:66:04:f6:72:ae:f9:3b:
25:38:19:65:53:65:a3:ba:1a:27:65:2b:82:db:fe:32:7b:e0:
6e:41:08:f2:23:a5:de:b0:52:56:9e:8c:c0:9f:e1:81:09:52:
08:20:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:15 2025 by rpki-client