
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: h9p6RSroTchH9y6a05ckJWTWQC/9oGAG2V4ap9f01b4=
Subject key identifier: 73:DD:2E:60:F5:89:A6:9F:A2:63:C0:D5:45:5A:F9:88:02:C5:14:1D
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 01987373E1448B9238481E3877969101FE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 08FB
Signing time: Mon 04 Aug 2025 05:00:30 +0000
Manifest this update: Mon 04 Aug 2025 05:00:30 +0000
Manifest next update: Tue 05 Aug 2025 05:00:30 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: Rxr8CKKAC+PIKckyPO8ZYdD0bsFowuqC6iVel/pkNX8=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e1:44:8b:92:38:48:1e:38:77:96:91:01:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Aug 4 05:00:30 2025 GMT
Not After : Aug 5 05:00:30 2025 GMT
Subject: CN=73dd2e60f589a69fa263c0d5455af98802c5141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:22:40:92:b1:b6:3d:b4:8e:ae:30:79:23:
3b:fa:64:9b:4a:71:10:be:25:58:3a:c5:71:04:15:
a0:55:78:d3:55:74:82:aa:31:4f:af:3f:b4:74:e0:
bc:3b:22:6e:b6:48:fb:a1:74:ad:8b:62:c4:38:5e:
f2:7c:47:69:19:d6:5f:a8:2c:eb:83:53:0f:ca:42:
5f:09:f9:42:73:54:65:d4:f9:ae:f4:b5:25:ac:7e:
f6:05:d5:5d:33:ff:86:e2:e8:49:a2:02:e0:ec:36:
59:f5:7d:f9:da:d8:4d:c9:3e:bd:65:e3:b2:09:9b:
e6:f7:ed:36:52:28:28:5c:7e:a5:c3:4d:c8:f3:bf:
4a:39:ee:51:3c:cb:75:a2:ff:35:19:eb:ff:d7:22:
9a:60:91:6c:12:75:31:f2:a9:38:2a:49:de:a4:47:
f1:0c:2b:4e:4c:5c:00:3b:b4:b7:74:cb:b8:58:eb:
a9:f2:3b:8e:ec:53:8a:e3:ee:47:f0:20:58:13:18:
59:57:63:b0:8a:41:68:4e:01:b3:15:ac:f8:9d:4a:
f3:a9:bb:0e:0b:ab:97:19:d9:8d:89:d9:1b:b6:56:
b4:af:c5:f2:a0:8e:e1:cb:cc:54:36:73:4d:a3:27:
3f:1f:9b:37:57:64:e7:d7:a3:94:86:47:d4:14:e8:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:2E:60:F5:89:A6:9F:A2:63:C0:D5:45:5A:F9:88:02:C5:14:1D
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:a6:26:bf:10:f3:73:ef:9f:f8:67:e0:12:25:df:f8:70:
a8:42:1a:7f:7a:87:1e:e1:87:a6:2f:85:61:f0:9f:90:54:32:
cb:5d:18:6e:a9:5a:37:44:b1:da:18:ee:62:bb:6a:05:ed:ef:
7f:65:55:1e:c6:19:a8:25:27:40:13:a9:44:66:85:d8:89:04:
da:7a:2a:99:c5:e6:06:18:d6:9c:e1:14:fa:77:ba:75:cb:a9:
12:0b:70:9e:44:e2:22:78:7b:18:74:75:7f:20:35:14:33:3b:
57:dd:a0:ed:58:92:58:13:6f:bb:c5:cb:d5:43:a5:15:b0:bd:
da:4c:62:38:d9:00:c1:56:99:df:8c:1f:02:09:70:ff:a0:94:
c7:eb:22:a4:81:c8:1f:7e:89:1e:ef:d0:c9:00:44:60:6f:05:
3b:d6:e3:27:d8:a2:92:b6:35:01:7c:98:fe:95:c6:c1:76:45:
7c:f1:54:02:62:8b:c6:e1:49:e4:c5:d6:73:fb:73:58:24:3d:
b0:56:ae:d2:83:e8:7f:02:ac:d1:53:ed:0c:6b:9d:70:23:ff:
15:05:1f:6d:89:c0:e4:63:9f:26:82:05:bf:cb:e3:9c:cb:1a:
7f:6e:be:b5:94:c0:22:be:3f:17:bd:4c:cf:80:43:cd:35:8d:
1e:81:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:52 2025 by rpki-client