Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: DDSCTwMLIvBSQzT/tdufJ3uSj9+O0PfNcSZPMQs+bAE=
Subject key identifier: 30:7F:90:10:C5:2C:4B:CA:E4:0C:F6:69:F6:A5:7E:D1:C6:B0:8D:A6
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01988168FA251515EBF48053B1554D7CD3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 103E
Signing time: Wed 06 Aug 2025 22:03:17 +0000
Manifest this update: Wed 06 Aug 2025 22:03:17 +0000
Manifest next update: Thu 07 Aug 2025 22:03:17 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: UiURaXmHQYGEB43Z7RJJczw4CYBGomtr/7dUu0bEz50=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:fa:25:15:15:eb:f4:80:53:b1:55:4d:7c:d3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Aug 6 22:03:17 2025 GMT
Not After : Aug 7 22:03:17 2025 GMT
Subject: CN=307f9010c52c4bcae40cf669f6a57ed1c6b08da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:da:a0:c7:f5:f7:45:f3:48:99:c1:f1:9e:
44:f1:61:2e:0b:4d:a2:22:e9:88:88:07:79:be:7d:
72:96:5c:f1:5b:98:aa:09:f6:f2:be:54:72:de:6e:
79:bc:42:fb:dd:1b:2b:75:f4:70:93:70:56:6b:5c:
c9:43:48:53:1d:ba:dc:23:28:07:57:65:92:a2:5c:
0a:14:f7:80:9d:f1:70:5c:06:c8:39:92:d7:53:31:
30:4c:8a:94:86:cf:9c:68:f8:c5:9c:e4:53:b4:9b:
da:9c:3f:f4:bf:f2:c8:09:c5:4d:71:bc:0d:0e:f0:
a4:df:7e:53:af:81:47:57:0f:77:d8:98:68:eb:a1:
17:e2:bf:3e:ae:d8:f7:71:1d:71:1e:8e:e8:d5:1b:
d3:f4:46:80:df:25:75:4e:26:c3:b6:5a:90:55:4f:
06:d5:4e:81:c3:67:43:4f:87:70:9a:67:82:43:0b:
07:b9:52:3d:d2:9f:f4:9e:bc:0e:9f:54:30:d3:57:
c2:f9:d6:b2:11:c4:9c:62:aa:00:77:2b:f2:82:27:
86:16:62:d7:f0:da:2c:7b:6c:f6:32:10:a8:a1:d4:
b6:06:ac:9c:dc:70:e2:2c:56:48:16:eb:f1:b6:0d:
52:3c:39:2e:59:ff:eb:0a:bb:62:fe:62:9b:30:ce:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:90:10:C5:2C:4B:CA:E4:0C:F6:69:F6:A5:7E:D1:C6:B0:8D:A6
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:16:4d:67:52:0e:d6:ae:4d:5a:0d:df:c2:49:68:67:e1:c1:
62:cf:31:57:77:e9:23:06:46:fa:83:c8:20:2d:2c:29:d5:f5:
fc:30:2a:6d:83:06:4b:34:9c:e8:6a:d7:f7:4d:e1:34:a0:ce:
a9:cd:11:26:47:1c:11:fe:a9:ba:c8:72:f9:e8:9d:2c:b3:e9:
ad:01:75:e7:d1:7c:7b:48:ac:3e:58:76:25:b9:94:ec:14:9c:
89:bc:bf:09:fc:2e:63:1d:eb:df:c8:8f:9f:9b:c5:a2:2e:29:
b3:bb:1e:9e:15:1b:39:7b:ba:16:5d:60:3c:d5:bd:5e:ce:84:
5a:04:5e:e5:72:cd:20:ea:5f:10:11:89:4e:13:bf:0f:5c:b7:
bf:a6:e9:25:88:c9:c3:26:a0:c3:ef:c4:94:2f:44:a1:76:ba:
7b:37:29:57:c9:c5:0f:73:05:26:d5:d8:dd:9f:f8:4d:48:17:
da:ee:ce:10:51:ce:5f:4e:5e:42:87:12:c8:ba:0d:eb:29:90:
52:02:ca:15:cf:96:17:be:7e:5c:36:77:e9:6f:4e:78:b6:70:
04:aa:64:98:55:c2:ed:fa:fd:78:25:f3:20:1c:32:5c:ac:61:
ce:87:5b:5b:79:8a:6f:22:e2:22:49:df:8b:85:b4:72:6c:e7:
7e:a1:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:13 2025 by rpki-client