Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: 4l8V6hQ0prBQIswaPz0OeeV8lo6rorqjkJvRdt8g+Cg=
Subject key identifier: ED:42:46:6B:C5:F3:93:0A:B6:D7:33:A1:5D:BC:B3:7D:87:79:4F:98
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 01988C2108A1D5AC09FBD6CD8165198CDEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0721
Signing time: Sat 09 Aug 2025 00:00:31 +0000
Manifest this update: Sat 09 Aug 2025 00:00:31 +0000
Manifest next update: Sun 10 Aug 2025 00:00:31 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: 9f2/dVvAPzHGzZVFe9UEnBHY5M1a184MgtmL2NxvDN8=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:08:a1:d5:ac:09:fb:d6:cd:81:65:19:8c:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Aug 9 00:00:31 2025 GMT
Not After : Aug 10 00:00:31 2025 GMT
Subject: CN=ed42466bc5f3930ab6d733a15dbcb37d87794f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:00:f3:cb:f6:f1:b8:44:97:09:74:f9:1d:
50:04:64:25:3f:8e:aa:36:de:d3:95:57:4d:85:1d:
c2:c7:85:c4:f7:ed:b3:43:ed:c2:a3:09:46:d9:cb:
12:b1:aa:cc:7e:07:94:b5:1a:b8:35:0e:27:1b:4a:
dd:aa:fa:df:cb:b7:cc:cf:50:c4:5e:f0:14:22:53:
5e:fd:f6:c7:55:5a:7f:8f:0f:0f:4b:46:7c:51:45:
dc:b6:d6:5f:f3:13:e4:3c:fe:8f:60:fa:6a:d3:fb:
91:fb:29:84:2c:73:ab:02:6a:2e:33:b6:bc:70:8f:
2e:b7:e8:b4:00:17:43:1c:23:5f:8a:40:ec:19:fb:
bb:58:ad:f0:15:04:4c:2c:6f:cc:aa:93:e7:8c:4f:
e9:6e:a5:87:e4:2e:7f:26:cc:e6:96:a4:5a:49:a2:
89:b1:58:0b:9b:4e:2d:27:74:04:55:a6:02:70:a7:
de:77:93:4b:4d:db:ad:96:56:f6:d1:94:c4:8b:bc:
88:38:00:e7:11:54:15:da:7e:ff:ab:d4:90:8e:57:
7a:72:57:0f:67:85:c0:0a:12:27:4a:7d:63:7f:c2:
af:47:40:fc:73:95:00:40:99:9e:9a:51:ed:f0:db:
27:b1:32:33:48:34:1c:ae:b5:a1:07:89:aa:7a:8c:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:46:6B:C5:F3:93:0A:B6:D7:33:A1:5D:BC:B3:7D:87:79:4F:98
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9c:9e:b7:16:2a:a8:c5:bf:77:d7:13:d4:f0:d8:7d:52:61:
a3:77:52:c0:d8:2e:e8:58:d7:7f:20:ae:b5:4a:ce:5a:ea:7f:
82:9b:be:5f:a3:5f:0d:63:9f:31:a7:2b:a7:ff:55:6e:bd:d2:
bb:5a:38:b4:e2:d6:14:2a:ab:84:48:dc:65:85:c5:43:ff:4c:
01:41:f7:49:e5:e4:77:bf:91:d9:53:d3:5e:ac:5e:66:4f:23:
e3:18:3e:c6:1d:e5:4e:9e:04:a0:c1:48:ba:94:6d:a8:9b:f1:
6e:39:f1:66:da:ff:ce:40:2a:3c:bc:69:21:67:9d:11:0e:d9:
2d:5b:5d:b8:b8:55:6d:36:bd:03:62:bc:0d:46:a3:3f:83:39:
7b:4a:ec:f6:3a:97:5a:5f:7a:92:3e:27:a5:dd:d8:b8:25:d6:
7c:15:84:f4:c7:a2:88:17:40:5e:99:61:b2:80:8b:19:0f:fd:
67:f3:39:19:46:f7:f9:ba:06:ee:0f:3b:71:c6:26:ca:6d:ad:
e3:7d:eb:47:b4:51:c4:c9:b5:92:c5:cf:55:b2:43:75:93:6f:
7f:5d:24:2e:91:3a:0e:2e:b2:1e:5d:92:52:a6:34:c8:cf:46:
3d:a0:47:00:88:81:22:56:1a:80:b5:d0:1f:05:ae:12:05:cd:
10:84:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:45 2025 by rpki-client