Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier: lUd0uNF70cDgch/t3JieKGLRSS7MdfoU1S/rttrF0SU=
Subject key identifier: 79:66:77:D3:3B:05:A3:A1:7C:3E:28:D7:84:3C:FB:A9:62:40:27:90
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 019872CF9E18D969B6C53250D4B4B4A8B014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number: 157A
Signing time: Mon 04 Aug 2025 02:01:05 +0000
Manifest this update: Mon 04 Aug 2025 02:01:05 +0000
Manifest next update: Tue 05 Aug 2025 02:01:05 +0000
Files and hashes: 1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: SeryQTb3a+OyzKcwRTGgz3SU5afQKulEMc0+NsIN3T4=)
2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:9e:18:d9:69:b6:c5:32:50:d4:b4:b4:a8:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Aug 4 02:01:05 2025 GMT
Not After : Aug 5 02:01:05 2025 GMT
Subject: CN=796677d33b05a3a17c3e28d7843cfba962402790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:b8:29:ab:56:08:d2:45:b0:15:dd:0e:b7:
3c:04:59:4c:d1:a0:e9:b3:e6:6f:94:4b:be:69:0e:
a0:9b:58:12:ab:33:57:f6:f1:ff:ab:d7:09:87:78:
1d:09:08:02:ff:20:c0:30:e9:78:e8:23:36:30:6b:
d3:d4:a2:15:5d:58:2d:8a:a9:ad:1b:1b:e4:4f:c1:
53:00:9b:17:06:bf:dc:bb:c2:f4:86:1d:89:a6:b0:
5d:f1:b7:2b:bb:7e:74:a6:1e:fc:2e:5c:54:c3:fe:
f0:1a:42:4e:e0:08:45:46:dd:0b:2f:8c:51:2e:4d:
9c:70:f9:28:92:6f:21:20:14:84:83:e3:e7:54:5c:
0c:ba:9b:b9:ab:c4:70:96:5d:7c:f1:08:6d:5c:f8:
9a:c8:c0:cd:18:53:fc:47:f8:dc:af:33:5c:86:12:
12:3e:95:08:82:93:bf:18:00:f0:c6:4d:6e:92:58:
fe:c8:ee:ae:00:c9:1b:94:67:93:e9:5b:ed:89:f5:
ea:c4:ea:e2:b9:dc:74:a2:23:e2:75:1c:06:67:58:
27:91:8a:8a:9a:a4:6e:1c:13:01:e7:cb:9f:64:fd:
e6:fa:47:a3:7b:e9:23:15:41:25:ef:6e:d1:95:b3:
bf:35:35:24:a8:ce:fa:b7:f9:47:be:23:c0:d9:39:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:77:D3:3B:05:A3:A1:7C:3E:28:D7:84:3C:FB:A9:62:40:27:90
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:82:19:39:ae:c3:fe:b9:c2:47:15:de:0a:53:e7:d6:c2:03:
8d:a6:c7:59:d7:8a:33:8a:1c:c5:7f:d9:3c:75:1b:ac:e7:64:
8b:99:e3:1b:e8:c0:31:b2:23:ba:d5:60:07:a3:f8:7c:88:1a:
ca:b6:ce:c1:f1:9d:01:71:b7:65:3f:fb:72:46:5e:19:e2:ee:
83:a6:10:f8:fc:a7:d4:88:d9:d5:38:79:13:6d:e8:2e:d2:ed:
fd:05:ef:e5:43:6f:ed:11:58:b0:73:df:d1:60:21:fb:18:70:
08:d0:8f:c9:c6:42:e7:3d:6a:77:13:46:47:ef:2a:4d:a2:b9:
87:3e:d4:60:92:e1:97:da:a0:94:82:b3:2e:90:c5:42:ae:18:
7e:2e:95:c2:0d:5c:8f:00:c5:ce:bb:16:39:54:d7:aa:00:9a:
a6:db:da:73:b5:db:2a:4b:6b:fa:d5:e9:b3:c8:60:83:eb:7d:
83:bc:a3:30:76:77:33:51:10:83:df:a1:ae:95:83:a9:12:35:
9e:af:e6:d4:86:e9:94:88:4a:7a:ef:f0:48:25:96:b4:5e:f2:
04:54:16:dd:51:69:ae:e9:b5:b7:51:d1:e3:06:92:87:ac:c7:
e0:d1:9b:c3:a5:2e:e9:28:d0:2e:87:6a:8b:62:ae:03:52:9e:
1a:11:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:42 2025 by rpki-client