
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier: MsjRk9lYh9kv7B87/5NiCr2a++U3rAKFsB2QSsujCDI=
Subject key identifier: C7:54:41:F0:BC:79:BB:5D:C8:54:1C:97:B8:8A:42:34:F0:3C:3C:7C
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 01987C780A242DD15EE54A4D92FE540D4C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number: 137A
Signing time: Tue 05 Aug 2025 23:01:38 +0000
Manifest this update: Tue 05 Aug 2025 23:01:38 +0000
Manifest next update: Wed 06 Aug 2025 23:01:38 +0000
Files and hashes: 1: 4TAvnt0eG7JuKsSMWZUEgsGMvao.roa (hash: n2Kdbh6aM1gzVM7r4e4o1E7EcRngRjFAuhxJZjUQisg=)
2: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=)
3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: ntxUwKfpVznpKVY41gFl7NTAeJZLU7Zr3lNLt0POCww=)
4: MniCdS_WZ4lZic5pzyt6lWwynsU.roa (hash: psz4JBmudhLxsVGB1qqd8o8XZ5Wqy2adF+mRTSu5HHE=)
5: a5zFl7YfRoI9PIFZlL8A6oYDdmo.roa (hash: TgtuYN4ql3AL9mn3/Ylv463rB0O0GB0BGknf6tE9nvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:78:0a:24:2d:d1:5e:e5:4a:4d:92:fe:54:0d:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Aug 5 23:01:38 2025 GMT
Not After : Aug 6 23:01:38 2025 GMT
Subject: CN=c75441f0bc79bb5dc8541c97b88a4234f03c3c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:d1:57:0b:56:8d:7e:26:63:10:14:02:e2:
19:8c:ae:16:14:4f:17:db:29:92:eb:2e:5f:15:ad:
2e:67:f7:64:c1:56:27:10:13:16:1f:04:2d:93:73:
c4:13:cf:0a:09:b0:64:b9:a2:e5:c5:6b:f4:2a:91:
4d:ae:ef:43:8c:a8:5f:09:b5:79:32:15:cb:7b:1b:
78:e6:47:d4:36:28:04:32:5e:86:e0:94:b8:5f:b3:
c8:b0:cc:0c:0c:81:ab:14:ec:34:7d:a1:ce:75:97:
45:e2:bb:17:1d:77:db:77:59:b5:e7:f3:d3:a4:24:
37:f8:5c:5c:6d:cd:02:56:48:1b:1d:7f:ae:8b:4d:
79:c7:4b:c5:b7:bf:ee:79:41:ca:23:33:54:ef:4c:
89:04:eb:ea:85:60:61:68:23:74:8c:ff:1b:8b:79:
bc:60:bd:38:36:43:80:76:43:16:2e:1c:e0:00:73:
55:df:dc:56:ba:9c:93:04:e3:b4:ac:f2:64:1f:11:
38:8b:50:50:f6:96:06:69:89:8b:ba:67:2c:48:7f:
79:0e:2a:65:07:36:3f:3b:7f:f9:94:fd:e4:20:55:
08:9b:7c:6d:46:10:d9:a5:8b:e1:cc:c4:1b:2b:9d:
2c:0a:53:b4:b9:db:87:28:7f:22:ff:f7:b5:05:d5:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:41:F0:BC:79:BB:5D:C8:54:1C:97:B8:8A:42:34:F0:3C:3C:7C
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:61:ab:06:ed:10:bf:01:5f:2c:a3:a1:28:a0:45:98:3c:c4:
ba:00:27:da:90:61:1e:72:11:9c:5c:02:8f:ab:63:23:04:86:
df:f1:c5:dd:9d:2a:92:9f:37:3c:77:57:9a:af:e5:9a:86:b2:
1b:de:c9:ef:81:ab:2a:c1:79:94:1b:1d:29:3f:c1:21:bc:6d:
ed:38:f9:27:9e:bf:bc:2c:7e:e5:a6:d8:d4:5f:30:d7:93:c7:
45:51:e6:88:2e:8e:4f:ca:33:f6:a7:96:03:36:7b:b8:2d:9b:
99:6f:09:a6:7c:a8:70:e6:89:2a:a6:16:53:3e:c3:9a:cb:86:
a5:56:d2:1f:67:fa:8b:68:1b:ec:aa:59:8f:b5:15:9a:10:bd:
91:c4:cf:64:d9:8a:45:35:39:b1:a3:21:27:d1:1a:bb:fa:1f:
7a:ad:0c:62:83:8f:8d:f3:6f:ad:97:76:9f:ec:1c:62:58:a5:
8a:75:67:7b:63:b1:66:e5:2e:66:fc:e3:57:11:4f:e1:d1:77:
2a:90:2a:a7:86:8a:b3:1c:9d:1f:39:d1:65:9c:6f:98:ee:a4:
c4:64:27:24:c4:3d:ab:67:86:22:6b:ce:ea:5e:a1:c5:ab:92:
0e:41:95:66:3b:83:9f:de:90:eb:cf:9d:8a:43:1f:b8:fe:1d:
99:de:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:04 2025 by rpki-client