Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: 7YkE16swUbn6I4D+94oIQN5qT5l0Lnw/Nbw8ahiZRPw=
Subject key identifier: 5C:9D:D8:1C:14:41:27:5A:A0:0E:83:C2:5A:2A:28:91:B0:95:10:92
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 01987B2D89ADA69DD9F7565365F4A2096A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 0344
Signing time: Tue 05 Aug 2025 17:00:38 +0000
Manifest this update: Tue 05 Aug 2025 17:00:38 +0000
Manifest next update: Wed 06 Aug 2025 17:00:38 +0000
Files and hashes: 1: HILr7pn8NThVCSH-A_rn05fyBNg.roa (hash: eVrxL2QWFmMtU5x6MqzXrb/DJHPKJPjLI8zuxMiz1ao=)
2: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: eZd8MtzmThUH7iXD34C2v5uyT7PyKyuk63206q9TPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:89:ad:a6:9d:d9:f7:56:53:65:f4:a2:09:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Aug 5 17:00:38 2025 GMT
Not After : Aug 6 17:00:38 2025 GMT
Subject: CN=5c9dd81c1441275aa00e83c25a2a2891b0951092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:00:d6:60:60:51:77:5e:0e:2e:58:e7:e8:
27:13:e8:e2:ec:7a:e1:5f:88:f0:32:72:9a:03:3e:
34:00:96:90:26:ed:21:db:68:c4:b1:e7:bc:2c:2f:
44:83:d8:72:ed:aa:7d:4e:57:2b:8e:b3:3c:55:3f:
2e:05:64:84:21:5e:ab:26:66:1f:c4:42:5c:dd:53:
29:38:e8:05:b0:6b:63:ef:a1:7d:7f:c3:6e:f8:30:
87:69:a5:5d:45:bc:4c:36:13:aa:67:e7:4b:56:2c:
98:bd:a5:35:09:00:39:68:0d:1e:da:e2:91:d5:92:
9e:46:8c:8d:b5:f5:61:bb:9d:39:48:2b:4d:89:db:
f7:93:0c:d6:d2:47:b7:47:77:6b:5e:d8:95:3a:ef:
83:36:67:2d:d3:99:f7:76:24:89:3d:2c:48:af:4d:
c7:e2:d4:98:d8:ac:f2:f5:7e:b8:6d:47:ce:fd:f1:
69:ac:95:cc:fd:80:fd:3e:62:33:a8:af:3a:7c:b0:
56:43:7d:8e:25:2e:b9:bb:8e:4d:f2:af:f2:a5:30:
16:50:77:5e:23:ca:f2:fd:45:53:df:f1:48:e0:02:
6e:69:53:6f:e4:bf:61:74:39:79:68:ac:b4:fa:dc:
b5:32:11:ac:5c:72:7a:19:fb:e0:a9:0e:87:3e:e6:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:D8:1C:14:41:27:5A:A0:0E:83:C2:5A:2A:28:91:B0:95:10:92
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:d3:60:c2:ae:5d:96:ec:ed:17:2c:62:9b:59:3a:36:de:
73:a6:08:88:50:0f:a5:d2:ce:af:26:4f:b5:7f:b6:d9:6a:59:
4b:4d:02:5e:3d:e5:fe:0f:dd:fa:2c:d5:38:ce:a7:42:3d:ad:
ca:be:bb:c7:02:d8:a9:d0:32:5b:9c:27:a6:42:b3:de:fd:75:
b7:13:5f:ae:f8:09:1f:1c:b3:1c:9d:99:9d:7f:76:8b:0a:fa:
d0:43:c7:8b:f3:df:cf:d5:9c:b5:61:13:c9:8e:39:46:db:1a:
d6:57:ed:38:87:03:76:cf:fd:83:d4:c8:67:6e:34:cb:1c:b5:
8b:83:a8:6c:d4:8d:d6:5f:2b:10:57:60:8a:b0:d6:b5:05:00:
75:4b:a9:96:af:48:30:74:b4:c6:d1:46:c0:f1:1d:91:aa:14:
bb:1b:fe:2e:90:a5:d5:68:db:e8:b2:04:00:4e:d5:e1:49:d9:
94:08:14:4a:6b:e6:83:f2:1d:48:27:f3:4a:a4:36:ce:ee:52:
6a:16:cf:35:78:16:3b:09:d2:92:53:3f:28:4c:bf:45:a4:f6:
a3:05:8c:fe:b5:c6:8c:2c:e9:cf:98:3f:e7:7c:91:00:52:6e:
83:2d:65:e6:88:82:bc:34:c6:1e:9d:90:85:c8:03:bc:48:dc:
08:c9:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:56 2025 by rpki-client