Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: Nwo5zpciuAOrRg2ivskQgmGJs1yb6O5S4xwzzyNXsaE=
Subject key identifier: 6D:CC:90:DF:EC:8C:B0:88:4F:A5:45:07:F5:D4:D6:9A:3A:77:7F:BB
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 01988E46CACC31299DD8E97F235498C9A38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 14FC
Signing time: Sat 09 Aug 2025 10:01:00 +0000
Manifest this update: Sat 09 Aug 2025 10:01:00 +0000
Manifest next update: Sun 10 Aug 2025 10:01:00 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: 5n8G21qvMqiYUk67GzMVCBuHBQQZCtjmzMmLI+aOpew=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:ca:cc:31:29:9d:d8:e9:7f:23:54:98:c9:a3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Aug 9 10:01:00 2025 GMT
Not After : Aug 10 10:01:00 2025 GMT
Subject: CN=6dcc90dfec8cb0884fa54507f5d4d69a3a777fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:0c:6e:98:9c:8b:9e:c0:17:e3:f5:12:62:
37:d8:7d:c5:19:5e:b3:f0:46:48:b9:24:a6:a7:af:
de:6c:20:49:cd:77:38:de:01:74:52:1a:56:2d:ab:
d9:59:15:54:a4:1d:db:fb:13:2e:ad:27:ec:c5:fd:
72:2f:bf:47:12:3b:99:70:b2:47:e2:4f:1d:6f:88:
83:1b:31:9d:9b:10:22:4c:8e:fc:54:3b:f0:22:47:
21:74:8a:15:c0:e5:25:c1:49:6b:06:b0:2a:81:5c:
f9:56:35:a1:f6:91:a3:e4:b5:63:e8:40:dc:f8:29:
fa:c6:54:17:56:47:f6:5c:aa:74:e5:8d:99:5c:11:
22:7d:6e:89:8c:ba:81:ce:a1:4d:10:3d:b6:20:12:
0a:a3:3b:8e:ca:d8:c9:14:3a:64:62:90:ac:5a:eb:
10:24:a7:b0:55:84:a3:0b:56:1a:a4:1a:40:3c:67:
56:a7:49:b1:a7:12:35:c6:99:f3:03:b9:14:78:78:
f6:d6:b2:9d:56:72:b2:99:32:ae:ad:3d:f0:78:18:
76:ee:2d:fc:ac:11:2e:7c:f2:dc:c0:eb:30:3d:68:
ec:29:f8:84:7b:c5:2f:8c:dc:d5:4a:e4:31:b4:5a:
d5:75:38:d0:7b:f1:54:77:91:18:70:3a:be:d1:bb:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CC:90:DF:EC:8C:B0:88:4F:A5:45:07:F5:D4:D6:9A:3A:77:7F:BB
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:03:61:62:b6:62:1b:c2:4d:b0:f8:de:d9:7b:39:4b:6a:d7:
4a:e1:a1:9e:9d:b2:22:86:6a:8f:3c:ef:5f:42:7e:5e:40:87:
c1:85:3b:9b:95:70:19:09:f0:83:54:0b:1f:df:58:14:be:1c:
38:f8:b7:d8:96:cc:c4:dd:34:b8:8b:c3:2f:8b:f7:0d:d4:c3:
51:90:a0:cc:44:3c:c4:e5:79:08:68:fa:6a:dd:68:4e:52:db:
5c:f2:1b:51:6c:b2:a8:31:4a:4a:38:1f:44:f4:78:2d:c4:09:
63:4e:2f:ce:c5:71:72:2a:69:3d:fb:41:8c:a4:2d:99:e6:45:
ee:aa:6f:2b:be:4c:4f:97:f3:31:74:69:44:95:42:e5:d9:40:
0a:56:bd:85:be:cb:2e:16:43:0b:7b:3e:f8:32:a5:6a:58:d2:
40:e9:f2:5e:22:a7:86:b4:16:a7:6e:d2:66:f9:af:7e:62:ec:
38:e9:2b:bd:de:9a:f8:a0:2a:07:a6:09:31:5a:09:54:fa:be:
92:eb:1c:cc:6f:e0:98:af:e2:d7:d9:aa:00:e7:07:75:91:1f:
21:9f:2d:94:6e:31:dc:35:4b:68:d3:09:9b:f2:06:bc:0e:d2:
40:5f:e5:20:b0:ec:7e:03:c2:81:bd:a8:ec:b4:d6:05:9f:19:
48:47:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:00 2025 by rpki-client