Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: SdA/hQpsJ1b+rW+KmPB0/KltHml3Wcy1+ljLb735cw8=
Subject key identifier: B9:71:C3:B7:BD:6F:9A:0A:9F:BD:86:2A:46:F4:DD:E3:4B:BC:E6:83
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0198941226D4AB5675D4120BA253735EBDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1331
Signing time: Sun 10 Aug 2025 13:01:14 +0000
Manifest this update: Sun 10 Aug 2025 13:01:14 +0000
Manifest next update: Mon 11 Aug 2025 13:01:14 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: /TlhGw/2VtnMU5Ta1VnEh/Fvt8gK3K4EJUjCti8la0k=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:26:d4:ab:56:75:d4:12:0b:a2:53:73:5e:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Aug 10 13:01:14 2025 GMT
Not After : Aug 11 13:01:14 2025 GMT
Subject: CN=b971c3b7bd6f9a0a9fbd862a46f4dde34bbce683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d1:aa:89:5f:75:36:e4:1e:4a:a0:33:1b:ae:
08:4e:fc:d9:78:60:13:2a:d5:df:b5:48:c5:d3:06:
13:ee:85:2d:ab:97:e5:ff:4d:a8:76:f2:92:45:9b:
fa:4e:4c:59:ca:2f:c9:bc:64:b9:5b:a4:d6:b6:78:
b8:83:1f:6b:5d:9d:0c:f4:4e:f9:00:8f:21:b7:f6:
e3:13:e8:fd:ee:3d:93:8b:58:b5:99:f0:f6:80:b6:
93:d7:a0:cc:81:4f:9b:d2:2a:59:78:f6:33:60:ae:
c9:24:1e:87:9a:66:2c:39:8c:0c:33:1e:fb:b5:42:
e0:01:4d:8d:57:33:94:09:67:cb:28:50:35:ee:72:
19:77:74:a8:4b:27:b1:5f:c1:bc:27:9a:a7:d2:6e:
19:cd:18:4b:c9:5d:40:b1:d8:2d:99:77:73:30:16:
84:21:9d:ae:2c:15:90:17:ee:71:7f:c6:06:9e:c2:
77:3e:9e:b2:f3:fa:e7:58:0e:f2:4f:a5:d5:3a:5e:
f8:88:46:9a:61:46:6b:82:53:7c:23:de:4d:f2:33:
3c:d9:b8:bf:00:01:44:37:d2:77:e1:be:b1:cd:05:
0a:df:16:7b:47:3e:06:cf:53:84:41:4b:a7:51:f2:
6c:a5:b1:01:d3:93:c4:bd:ad:af:24:58:39:d7:be:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:C3:B7:BD:6F:9A:0A:9F:BD:86:2A:46:F4:DD:E3:4B:BC:E6:83
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:41:07:ca:3b:e0:02:dd:ca:4f:6e:1c:a7:5b:4d:ca:8c:a4:
48:3f:dd:ea:69:d4:0b:2c:4c:5c:0d:b3:1b:43:02:4e:74:7b:
8d:83:f4:88:dd:40:27:ad:47:f8:30:ce:2e:ff:a7:9f:43:71:
80:7a:c9:02:52:9e:08:44:27:db:0f:97:5d:53:ed:2a:04:6d:
e7:40:ae:3c:5e:df:43:e1:56:21:fd:30:15:0e:f9:cb:66:65:
d9:70:a2:bf:56:b0:07:93:3e:ee:09:c1:36:74:0f:19:fd:ad:
2a:45:99:77:c1:78:6c:d0:d6:8d:2d:da:e1:89:04:cc:52:a9:
2f:ec:bf:e3:d5:aa:48:bd:3a:f7:79:a5:a5:e1:aa:f2:f3:05:
d8:80:27:a1:89:e9:79:02:a5:f4:bf:a8:09:76:ac:7c:05:de:
dc:57:d1:db:18:fa:21:e5:30:32:12:4c:f7:94:e2:03:10:92:
35:88:72:76:0e:73:0e:b0:b4:56:ae:96:3a:dd:cd:cc:51:9c:
27:15:b0:8b:a0:3c:2f:ad:5f:05:f4:1f:0e:8f:34:2c:7f:9b:
37:27:bd:e6:75:ee:6e:22:b1:8f:69:18:23:9b:e3:f9:72:6b:
5c:19:5e:6a:cc:61:54:c0:64:f9:ed:43:a2:10:29:be:fa:b5:
e1:c3:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:20 2025 by rpki-client