
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: hYfueI70/YETTP6OjulVIUC+Dx+wivq8MhXK3sQZaww=
Subject key identifier: F4:64:0A:34:1F:73:58:6F:5F:ED:D2:C1:0B:87:68:62:98:8C:56:A5
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01988EEC354697FF61C375E913204F195C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 15B7
Signing time: Sat 09 Aug 2025 13:01:41 +0000
Manifest this update: Sat 09 Aug 2025 13:01:41 +0000
Manifest next update: Sun 10 Aug 2025 13:01:41 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: JuhcEHiL/xxh/Zv0rSMS9TJRjzXL4ImLL3zF6NADjx4=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:35:46:97:ff:61:c3:75:e9:13:20:4f:19:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Aug 9 13:01:41 2025 GMT
Not After : Aug 10 13:01:41 2025 GMT
Subject: CN=f4640a341f73586f5fedd2c10b876862988c56a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8b:ea:84:7b:6b:ed:23:8d:3d:be:03:63:38:
1e:a7:9d:4f:a3:e4:bd:33:a0:23:79:ec:00:fb:c7:
3b:5f:52:e1:2e:b4:ac:e1:d8:b3:c3:ab:0e:39:95:
15:63:f8:93:6f:95:82:8e:60:68:b7:73:72:1c:22:
6f:bd:f7:c9:ac:47:4a:95:fc:6b:ee:d4:3e:b5:65:
bb:20:c0:4b:3d:b7:a5:84:c8:50:67:9f:8f:b6:e6:
81:6a:f3:db:e6:23:d0:eb:38:e1:85:f6:c5:bf:58:
07:46:92:83:64:30:bd:63:aa:9e:f1:6f:53:31:df:
54:3e:ce:3b:2b:d7:19:19:a1:b7:cf:54:de:7c:9e:
b9:c6:2c:23:55:fd:1f:57:b2:90:8b:a6:3c:13:c4:
44:85:6c:0a:e4:99:f0:72:d4:a8:d3:57:b4:0f:0f:
fc:ea:ed:71:2f:03:9a:0d:51:bd:c6:53:7c:3b:88:
66:b3:fa:33:34:98:06:8c:2a:78:40:10:45:ab:07:
5e:c4:8a:3b:21:b8:10:b0:1d:f6:dd:c9:72:82:72:
fa:a4:73:e8:11:18:44:bd:c5:ef:ee:98:95:53:e9:
6b:3b:f2:bd:c5:46:0e:86:56:1c:02:0a:44:c8:65:
13:af:fa:55:fc:8e:aa:2b:6b:80:9f:d2:02:d2:16:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:0A:34:1F:73:58:6F:5F:ED:D2:C1:0B:87:68:62:98:8C:56:A5
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d4:15:a8:38:9b:96:be:df:a7:21:2e:2f:7e:6a:fe:94:d4:
ca:8e:2c:64:46:de:80:b0:b6:f9:2f:e1:48:f9:74:50:64:0f:
d7:8f:90:32:38:47:64:07:ba:e9:b3:33:e0:d7:27:cf:83:ac:
0f:69:62:c7:e8:07:19:26:a9:e9:cc:b3:c9:f0:39:1e:02:4b:
0f:e5:be:06:9f:6a:79:23:86:80:33:9b:31:db:50:4c:f5:8b:
c4:18:5e:34:07:09:05:a2:df:48:7e:80:a5:a4:f4:e9:b0:b4:
c5:63:90:72:61:7e:6f:fc:f5:36:a3:56:fb:fa:6b:8d:26:a5:
6f:f4:ee:df:dc:5c:8f:98:81:21:95:4f:fd:bf:b7:9e:a9:15:
41:67:b1:d4:3e:dd:c1:24:b3:aa:30:8e:18:c9:54:f3:7d:fb:
86:96:1d:a4:8d:6b:fd:6a:ca:08:fe:a6:4d:1c:12:ce:72:84:
87:e6:ce:0e:d6:0f:99:fd:0a:ad:6b:28:71:3b:b3:6a:a2:2f:
c9:f1:8f:3c:c9:16:01:bf:80:c1:3d:77:46:a6:96:68:8c:99:
00:e5:07:2b:24:33:9f:fc:75:37:ca:de:d4:9b:44:88:44:88:
69:f9:b5:57:2d:ed:54:c3:a2:a4:9d:5f:65:97:2f:be:32:a3:
91:94:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:18 2025 by rpki-client