Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: 0ftj+4Ca1JdsbGiKyGMcxwK6hRRXUvPE1n9t+Sibf3I=
Subject key identifier: EC:8D:B1:AC:58:49:4A:BE:88:08:F1:E4:72:65:95:15:E9:6B:92:B7
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 01987F79CDDA308E14DECBFAEE7DF04E4866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0DE9
Signing time: Wed 06 Aug 2025 13:02:25 +0000
Manifest this update: Wed 06 Aug 2025 13:02:25 +0000
Manifest next update: Thu 07 Aug 2025 13:02:25 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: lENuLF/jbSQ7mM7WopJ2Tl5Yqj4/u65PG6nGg+lSzxs=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:cd:da:30:8e:14:de:cb:fa:ee:7d:f0:4e:48:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Aug 6 13:02:25 2025 GMT
Not After : Aug 7 13:02:25 2025 GMT
Subject: CN=ec8db1ac58494abe8808f1e472659515e96b92b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:66:a8:7c:94:80:a7:68:a1:c9:9a:76:48:
93:42:00:d0:57:f2:c8:60:7c:11:69:32:9d:b6:20:
e4:1d:44:7a:62:75:a6:f1:b7:cb:34:7c:9e:f7:86:
50:be:c2:6b:15:1d:0c:1d:6d:d5:b1:0b:d1:dd:dd:
49:6f:fd:f3:d8:ba:08:8d:39:8c:f7:e0:23:15:ae:
1f:51:7c:d0:5b:97:bb:07:64:a9:d3:04:c2:b7:d2:
94:f0:14:3f:38:99:4b:66:98:ae:cc:f6:53:82:a3:
94:8f:5b:a2:80:39:a6:ff:a7:80:e0:65:4c:e1:77:
c8:e4:d9:8c:c4:c4:75:2c:b2:c2:ca:16:b9:05:39:
ca:1c:35:b6:15:94:a2:d4:20:87:68:fd:20:c5:7a:
18:36:6d:70:6e:e5:e3:b4:81:af:e7:a1:0c:b1:21:
a0:b2:37:05:dd:a6:4b:52:78:9f:a4:0b:0a:39:53:
ea:6e:48:fb:85:b3:ae:49:34:3a:b1:6d:0f:a3:d2:
e6:39:9a:11:99:74:eb:a3:ca:8c:fe:57:f0:d8:37:
b6:d6:69:b7:d8:10:05:fb:09:04:a1:c6:2e:98:fc:
f7:1c:6b:0a:68:d2:d5:f0:cb:5e:b1:7b:36:9f:cc:
c9:18:4d:02:0c:60:25:97:fc:e2:66:02:dc:ff:b0:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:B1:AC:58:49:4A:BE:88:08:F1:E4:72:65:95:15:E9:6B:92:B7
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:44:65:aa:4d:d9:8a:65:51:af:39:23:13:6b:53:5d:71:71:
58:bb:97:a4:ed:57:a0:bf:0c:60:b7:4d:af:04:d1:89:c4:d7:
85:ff:ba:64:79:bc:7d:ef:c6:c2:66:e4:c9:64:9c:25:51:45:
4d:56:c2:e9:7b:c9:5b:3a:d4:0b:b7:67:fa:d0:0b:10:25:4c:
89:c5:f8:5f:84:d6:7b:02:06:5d:17:e0:f9:4f:13:49:6a:a9:
59:1c:6c:a1:f0:5e:c3:bf:91:d4:33:ca:54:4a:46:76:54:d4:
c1:87:91:b2:3f:89:63:d8:9b:e0:0e:39:71:29:6e:86:0c:af:
e2:94:bb:b3:c1:45:59:1c:ce:62:b7:bd:5e:02:d2:22:38:51:
3b:80:05:cb:f9:0a:83:82:84:a8:61:08:5f:cc:cf:c1:bc:69:
2a:79:be:a2:37:e1:2b:68:2d:b4:5d:30:14:5f:10:6f:48:42:
0d:01:4f:45:5d:ca:32:68:3f:b6:93:75:d0:78:99:69:19:7d:
5a:59:d9:da:a3:75:5e:be:22:13:1b:3e:4f:ba:08:63:26:8d:
a0:a7:98:86:57:c6:38:99:ff:c6:e6:c9:ff:9c:43:2f:b6:95:
19:c5:84:87:59:60:a4:99:29:05:b5:ea:c2:26:79:ad:64:2e:
b3:f0:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:35:25 2025 by rpki-client