Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: zcuJEci8vYoAYnIp0uiMEh+/RHVz08nF82AHBRMuCqo=
Subject key identifier: 20:C7:19:17:85:53:EA:03:E2:48:89:CC:A0:DA:BF:75:CD:5F:15:A6
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 01987DF7CBE461B5D08725F48AEEBD5ADD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0CB6
Signing time: Wed 06 Aug 2025 06:00:48 +0000
Manifest this update: Wed 06 Aug 2025 06:00:48 +0000
Manifest next update: Thu 07 Aug 2025 06:00:48 +0000
Files and hashes: 1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: Wm69avLB52YAIZAgXKAKLMJUrfTNPhIbO75ha3St0QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:cb:e4:61:b5:d0:87:25:f4:8a:ee:bd:5a:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Aug 6 06:00:48 2025 GMT
Not After : Aug 7 06:00:48 2025 GMT
Subject: CN=20c719178553ea03e24889cca0dabf75cd5f15a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:b8:87:42:b7:72:0a:6f:57:10:35:61:f0:
95:2e:39:7c:04:af:4b:7d:91:c4:f9:0e:28:51:b1:
70:56:1b:88:80:5d:66:56:8e:ca:06:db:29:7b:c0:
22:e7:c2:de:c1:46:8f:67:e9:23:2a:59:a3:43:dc:
47:19:d3:a6:31:0d:c5:65:0a:94:49:d7:1b:77:f9:
e2:59:a0:9e:fe:54:a3:0b:30:6b:3b:55:ba:47:1a:
e0:fa:54:7f:b7:00:ca:6e:85:3c:90:4c:f9:f4:bb:
cc:35:69:7c:d5:0f:41:6c:3a:3c:47:34:f1:22:49:
1a:a4:c3:90:2d:ba:21:dc:68:fc:50:6e:53:60:31:
c3:4d:ef:a2:16:d5:d0:0b:e4:5f:f4:63:b1:cb:1f:
3a:d2:28:fc:d3:63:75:39:90:69:99:3f:88:93:e0:
c6:ff:dd:b9:db:1a:ee:dc:df:ff:54:3f:69:9a:ae:
6c:d9:86:20:1d:7a:36:70:6b:94:92:87:20:43:a7:
86:a1:c0:e8:4c:44:ab:c1:4a:08:5c:c5:9d:39:60:
00:b6:90:8a:d3:db:a6:1d:96:37:3c:76:18:fd:9a:
47:58:b6:3a:e5:96:66:62:ce:1b:75:e4:75:20:76:
2d:7b:74:b7:5c:ae:af:1b:a0:d8:92:13:db:80:fd:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:19:17:85:53:EA:03:E2:48:89:CC:A0:DA:BF:75:CD:5F:15:A6
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:de:6f:8c:c6:be:ff:16:cd:a4:99:07:3e:87:ba:59:82:
5e:dd:da:3b:58:e9:30:d0:ae:79:23:a6:05:96:bd:bf:9b:15:
9c:8f:78:02:d7:02:12:6a:bd:bb:e8:0a:af:5a:fe:5e:e0:26:
9f:66:33:6f:27:84:90:94:42:10:b2:5f:50:4e:5c:24:5f:c7:
46:44:ff:20:10:30:e2:a3:d0:b2:c5:a4:3d:e1:0d:8c:9f:bd:
1c:4c:a8:09:5e:5d:00:33:fe:a9:90:19:7b:b0:26:ac:88:ee:
3f:66:48:f3:58:31:4d:03:fe:c0:e6:0c:20:0e:2d:e5:35:21:
14:c0:30:47:28:ae:93:8d:06:1c:3d:26:6b:ce:88:bf:c3:73:
f8:02:0a:3f:e1:dc:52:ab:40:e3:8f:38:98:55:2b:7d:a8:17:
df:01:a9:fa:72:ad:30:a4:d4:ff:17:85:c0:ad:22:9f:fb:44:
77:10:40:ab:50:0d:58:9d:8f:df:dc:65:b2:fe:12:b1:5c:e4:
ff:52:21:03:4f:1d:a7:ea:02:7e:6c:5f:45:15:3f:b3:a6:85:
75:5d:d1:2d:85:a5:95:3b:9d:07:a5:ef:5f:0d:04:ae:f0:a9:
ec:fd:eb:00:46:cf:03:6d:64:5f:02:37:81:fb:2f:7c:1a:32:
8a:01:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:18 2025 by rpki-client