Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: 5k94n4N0OdUqs4gzm0gaJ+4nBC2B1aoLcV1UDyIhNu0=
Subject key identifier: CF:94:DD:AA:3D:88:01:37:02:B9:97:DA:02:93:8C:1B:9D:B7:5B:E6
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 01988D6B5EC93D61E6378FFDA428D628B889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 06:01:20 +0000
Manifest this update: Sat 09 Aug 2025 06:01:20 +0000
Manifest next update: Sun 10 Aug 2025 06:01:20 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: tq+KVpbgxZ1xzshMVXxi8h+Qiv94hiCtOYknH48T6Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:5e:c9:3d:61:e6:37:8f:fd:a4:28:d6:28:b8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Aug 9 06:01:20 2025 GMT
Not After : Aug 10 06:01:20 2025 GMT
Subject: CN=cf94ddaa3d88013702b997da02938c1b9db75be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:77:35:c9:7e:2a:c9:b6:91:3c:56:bd:3a:
13:9a:d6:8e:bd:4b:fa:ea:ab:b5:4b:6c:7b:c5:96:
31:ad:47:2d:07:21:52:39:3f:1a:ec:4c:bd:25:8a:
4c:9e:dd:5e:ca:0a:46:64:a8:f0:82:0d:2e:8d:ac:
6d:d2:5d:b7:60:dc:c6:d1:38:9f:f7:65:6b:35:e3:
57:23:87:de:75:df:59:34:21:02:28:14:20:13:b4:
0c:bb:39:7f:dc:d6:21:86:2e:a8:70:2c:52:db:be:
2c:f1:57:cf:36:73:f2:ac:09:2e:b9:c0:88:e2:c4:
4e:8d:5c:58:a0:2a:06:ac:cb:04:f1:13:01:dd:cb:
c3:1a:ff:67:69:5c:2a:70:16:3d:bd:3a:b7:e8:c7:
91:4c:35:54:6d:d9:d2:45:44:8f:fe:18:f9:77:0a:
b3:db:5e:6e:65:78:0a:83:bd:26:10:60:23:2c:b7:
c8:3f:d9:50:08:c9:be:89:58:e9:7f:7d:c9:e5:c8:
5c:40:66:25:68:28:cb:bc:18:df:89:eb:bb:2f:84:
d1:7b:ab:c5:11:13:df:d4:cb:b4:8e:d4:a3:50:9f:
a1:57:04:ca:3d:f6:3b:85:ad:9c:10:01:c6:f3:e4:
db:8d:59:68:4e:6c:95:65:61:42:47:5c:23:d2:cc:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:DD:AA:3D:88:01:37:02:B9:97:DA:02:93:8C:1B:9D:B7:5B:E6
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:da:3c:d8:d8:32:37:7a:fe:2c:f0:8e:1e:93:3e:f4:8b:
4e:52:e9:84:33:76:44:84:38:0e:0b:c2:21:8f:b9:09:06:fe:
8d:a4:ad:b5:30:cb:a0:d3:5a:51:01:5b:66:0b:c7:4b:fa:2c:
fe:7c:f3:04:ce:b3:a3:90:d2:14:14:b6:2c:ec:ff:11:1c:b6:
a7:82:57:87:b2:6c:ee:ca:17:ae:30:fa:49:27:e6:41:bf:9e:
28:03:7b:0f:b3:c8:5c:33:3a:5b:4e:1b:f8:52:6a:50:82:0e:
e3:6e:dc:06:2a:f3:f5:6a:93:48:c5:56:98:62:fb:1c:8f:a2:
26:69:e7:41:a9:b8:d2:fd:6e:e6:56:24:b8:5f:4a:e4:ec:82:
0d:59:ef:dc:fd:1d:08:c5:9a:36:e4:3c:4e:b8:16:ff:5c:79:
f8:e4:48:92:6d:ec:28:3a:e3:d8:23:93:36:95:d5:56:7d:74:
a1:76:fa:3c:71:7a:32:a1:b2:f8:dc:74:0f:4e:8e:0d:e0:17:
3c:40:74:f5:36:a8:b7:78:60:af:e8:38:13:34:de:dc:46:eb:
ce:ca:99:18:97:40:df:51:25:ed:57:a5:22:8b:d7:eb:c4:1a:
e7:8e:13:bc:eb:45:cb:be:36:9b:5e:51:15:bb:53:ba:18:ac:
0a:b0:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:03 2025 by rpki-client