Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: qBEkMJ0VSQgfsWaGv2upF7Gr1kUszlrQHSiVQuErGRg=
Subject key identifier: 92:18:9B:F1:6C:67:99:58:ED:90:FA:74:58:62:0B:15:4B:00:1A:AE
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 019874BE2C8FE361CC0F802E84871761BFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:01:16 +0000
Manifest this update: Mon 04 Aug 2025 11:01:16 +0000
Manifest next update: Tue 05 Aug 2025 11:01:16 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: 3v2dvNEnJYfwk2FYXxfZP3PyDn0yo/T23DRtL8b6Nr8=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:2c:8f:e3:61:cc:0f:80:2e:84:87:17:61:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Aug 4 11:01:16 2025 GMT
Not After : Aug 5 11:01:16 2025 GMT
Subject: CN=92189bf16c679958ed90fa7458620b154b001aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:3e:9c:d5:62:19:44:bc:6f:5d:cd:de:9b:
17:5a:87:a1:60:8e:2c:50:ae:0e:0f:f5:91:a0:bc:
ee:f0:cc:ec:55:c1:b1:b2:cf:61:d4:18:94:35:57:
4c:d8:0b:b9:63:60:b3:d2:f9:86:9b:61:5a:f5:dc:
15:2d:46:07:b3:91:95:a3:88:cf:42:d5:b7:ea:4b:
2a:cc:1c:9f:23:14:25:af:01:bb:20:d8:b7:08:8a:
c7:e7:e4:22:70:68:0b:6c:c4:9d:5f:97:82:b7:2f:
d0:78:e2:c7:ba:bc:3d:f7:d8:c5:82:07:6b:29:4d:
d3:94:0d:d1:8a:1a:2c:f1:3d:33:a2:e5:f6:50:5d:
85:4a:5f:3b:ae:88:fd:90:49:4b:ce:16:c0:c7:c0:
94:1d:00:f8:f3:87:3c:e1:63:36:5e:f5:b8:3f:c4:
1e:55:c8:61:5e:d3:be:af:cf:05:03:8e:60:38:0e:
37:9d:2b:f3:28:f5:08:a6:2a:d6:66:b3:a7:60:c8:
7a:53:0e:3a:e6:e1:d3:f2:71:d5:d8:40:49:81:69:
b8:06:64:ac:53:66:cb:5c:22:9a:26:e8:01:4a:b6:
da:63:a7:3f:df:75:86:85:0c:46:28:aa:7d:15:d0:
25:15:97:ec:60:57:2b:08:4f:d3:16:57:83:49:ae:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:18:9B:F1:6C:67:99:58:ED:90:FA:74:58:62:0B:15:4B:00:1A:AE
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:eb:8a:a2:d6:82:cf:d4:a3:4c:0a:98:0a:6b:82:18:6d:
81:60:5e:90:47:89:f5:29:c4:3a:bd:45:0d:a4:0c:46:66:8f:
a5:8c:49:a0:c2:94:a6:0f:13:9b:48:bc:c7:0b:ad:7b:d7:32:
15:5a:76:1a:da:7a:7f:4b:fc:e3:b9:80:71:73:e5:9f:8c:6c:
c6:7d:01:b3:5c:26:09:a5:5b:f5:7f:59:08:3b:b6:78:ee:03:
e1:73:33:bb:c6:d6:20:30:ab:7e:47:aa:29:4e:87:14:b2:87:
c4:0c:d6:91:a7:2d:1c:b2:a5:65:e7:cd:8d:ed:68:23:8c:7d:
6e:8d:20:dd:d8:7f:d1:14:1b:01:1a:02:19:24:44:75:7f:52:
16:b7:0f:be:65:89:66:5c:84:fc:f0:a9:bf:09:d1:9b:b7:93:
87:02:3d:e5:1d:b6:0c:b9:08:67:a0:8d:f3:50:cc:40:73:a4:
5a:c9:48:d5:3f:e8:b9:ca:44:06:bd:b1:5d:c3:c8:e4:a0:c9:
7b:36:7f:cc:0a:3b:6e:ac:1f:22:3d:70:af:b6:d5:7e:ee:8f:
33:ff:b1:68:1e:01:b9:4b:55:8e:5e:6f:f3:cd:f9:cd:49:6e:
b4:4f:b9:be:8a:f9:52:08:e0:ce:24:3b:d6:e8:fc:1f:c6:11:
18:d1:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:01 2025 by rpki-client