Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: jqntRF9jWlvbXYRAgAszEl86RunG1HDRgK9DXf76KlQ=
Subject key identifier: 17:31:25:F2:A9:37:92:CC:6A:82:33:56:FD:5A:1C:0E:AA:23:76:C8
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 0198782CDDD946619657366AC9D500A65D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 03:01:02 +0000
Manifest this update: Tue 05 Aug 2025 03:01:02 +0000
Manifest next update: Wed 06 Aug 2025 03:01:02 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: 49iVi1a1/VGXIcmrJmFPJwc5Rb8rTQ2tRUR8BJ9zZ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2c:dd:d9:46:61:96:57:36:6a:c9:d5:00:a6:5d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Aug 5 03:01:02 2025 GMT
Not After : Aug 6 03:01:02 2025 GMT
Subject: CN=173125f2a93792cc6a823356fd5a1c0eaa2376c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:01:8e:e1:5a:f6:9b:f1:b5:96:96:09:ff:
32:36:74:97:37:8a:7a:8b:de:33:f4:79:90:74:63:
e9:e3:13:8f:04:ba:f9:32:19:9e:a7:b3:cd:d2:41:
f6:b2:df:cf:6e:19:91:21:f0:59:34:97:04:9c:84:
0e:0e:8e:25:83:eb:9b:2b:bc:99:4c:3f:c2:f3:3d:
c2:2c:04:b3:5f:3c:da:bf:98:5f:46:a1:f2:a3:56:
a6:a9:41:20:65:19:1b:8f:02:49:6e:39:eb:0b:bb:
79:06:5b:0f:36:6d:8a:c5:68:68:33:94:f1:e4:dc:
a5:cf:1e:29:38:6b:74:7c:1f:d0:52:9d:43:6d:c2:
f0:ab:57:6c:de:ff:00:68:3c:29:1f:8f:7a:c0:bc:
42:3d:30:e1:57:32:b8:b2:f7:8f:c7:79:56:ca:1f:
bc:03:d4:77:68:ad:df:d5:22:13:60:8b:ff:21:e4:
aa:85:5c:8a:8f:2b:65:de:65:ba:c9:40:97:3b:0b:
b2:e1:f5:b9:da:df:89:af:c0:6d:af:45:4c:2e:96:
01:3d:d4:6c:d1:e3:cc:4f:c4:36:4f:00:31:18:b4:
8f:b3:6e:bb:68:52:31:00:19:e8:0e:86:c5:97:9f:
29:52:92:99:fc:6a:32:3c:35:cd:89:d8:4f:5e:4c:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:25:F2:A9:37:92:CC:6A:82:33:56:FD:5A:1C:0E:AA:23:76:C8
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:da:bb:1d:ea:6d:d3:de:aa:2f:5e:8b:8c:81:3e:60:d5:e5:
5d:b2:be:93:48:3d:ae:21:cb:c8:95:28:42:64:6e:8d:4d:72:
d2:9b:92:09:9e:c7:da:25:a7:11:b1:a4:7a:c9:fa:01:6b:19:
20:ab:64:12:53:c1:5d:6b:d8:da:49:37:96:ad:df:93:02:d4:
18:ab:a3:6f:f7:27:a2:c0:e9:b5:db:69:d2:88:a2:a7:ba:ab:
ee:aa:42:c7:20:a5:b8:45:29:60:d1:8f:92:4d:b2:2f:3c:5e:
a7:25:de:ec:57:d1:a6:36:a5:5b:3f:b6:f2:84:eb:30:37:aa:
11:77:39:21:43:07:61:86:de:ee:14:2a:07:a5:98:9e:93:0f:
6b:d4:27:4e:d8:be:b9:11:fc:ea:90:36:d5:b4:d6:ae:ae:84:
b6:57:9e:10:d9:3d:1d:41:89:c5:20:88:c3:b2:5b:7f:8a:3e:
c6:ef:12:40:32:b3:d2:39:83:ec:03:36:1d:d8:76:b4:22:9c:
85:9a:29:a4:ee:26:ab:77:26:6e:80:5c:97:e8:0d:3f:32:52:
27:91:e0:d9:73:03:04:43:ce:a7:ea:e9:c0:37:5b:b0:c2:4c:
50:db:02:d3:84:18:eb:03:d2:e1:84:69:42:c9:5b:ed:1e:5e:
d1:3f:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:25:48 2025 by rpki-client