Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: rB26Z3daD5MOZrh7qh+je8kCaLE6jCnRIZG7bOL40Zc=
Subject key identifier: 2C:3E:E5:2D:BF:F2:6B:EB:6C:38:6D:B3:85:4B:7B:01:A0:74:79:DD
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 01987F7850F90DE2342F0674AE7D2ED21746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:00:48 +0000
Manifest this update: Wed 06 Aug 2025 13:00:48 +0000
Manifest next update: Thu 07 Aug 2025 13:00:48 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: Sfi1y6fgyfpeAdC6boagCXy7X6T8EdYzDITBFIlJpgA=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:50:f9:0d:e2:34:2f:06:74:ae:7d:2e:d2:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Aug 6 13:00:48 2025 GMT
Not After : Aug 7 13:00:48 2025 GMT
Subject: CN=2c3ee52dbff26beb6c386db3854b7b01a07479dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:7f:87:a9:cf:ae:5a:c0:de:fa:9d:67:03:
96:ba:72:17:21:22:db:18:72:b5:7a:28:fd:57:96:
12:60:d0:78:2d:43:b3:2b:66:b7:f0:86:54:c9:3d:
7b:a4:e0:9c:fd:85:01:5d:1c:ca:bf:8b:9e:9e:a7:
54:00:5b:c1:ab:7e:ac:fa:ff:cf:ff:ac:71:7a:f4:
e1:35:92:f9:83:b1:1b:34:d7:0f:3c:17:ba:d1:56:
33:b3:76:76:ba:e3:ea:25:da:b1:6b:97:f8:80:63:
ff:35:fe:da:62:99:3c:0d:5e:c7:17:11:f8:9a:4d:
e9:15:e9:73:d9:d7:d8:0b:fe:04:bc:b2:a0:be:37:
ab:68:cb:3b:f9:e4:57:a4:bf:10:92:01:f5:91:70:
a0:39:46:03:7a:46:a1:76:ec:45:1a:79:d4:ba:f2:
88:5e:5d:f6:6b:9a:ce:6e:7a:9d:8b:57:82:58:2e:
3a:96:b7:45:d6:88:93:30:e3:df:03:7d:29:aa:2f:
16:e1:78:47:a3:8f:ee:8a:58:35:d8:e8:82:b6:a3:
22:16:70:ee:1f:f5:2f:bf:77:93:03:1c:ea:4c:1b:
87:af:4f:dd:67:e5:c5:72:b7:20:38:b2:f9:2c:de:
04:d0:0e:f7:f8:20:08:95:41:d0:97:95:0e:15:37:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:E5:2D:BF:F2:6B:EB:6C:38:6D:B3:85:4B:7B:01:A0:74:79:DD
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:db:9e:ac:8f:c3:03:e0:56:8a:38:3a:a9:67:49:ee:41:
99:36:13:34:97:bf:4d:19:2a:9a:1d:38:f9:c1:f4:23:72:b3:
3f:6c:6e:a2:99:cc:ab:89:cf:60:8e:69:8a:f5:18:60:bb:2d:
86:b1:f2:4a:d3:80:62:35:db:ee:0b:c8:c4:5a:4d:44:a1:f8:
f7:8c:3f:68:54:69:84:68:5f:9a:e6:fa:15:84:da:6f:35:ff:
7b:45:b8:6d:51:25:d6:3c:7a:cf:b4:79:13:09:30:b8:38:ee:
bb:25:47:33:a7:c0:f5:81:c4:a5:b5:e0:21:ab:42:46:98:2e:
43:33:8a:10:44:4b:0c:fc:4f:51:f7:be:58:8a:ee:3c:99:56:
fd:ad:bc:9f:c1:6c:ab:0b:c1:2f:b9:7c:ca:4b:b6:80:71:e6:
d2:09:f6:a3:11:ae:a0:21:45:58:bf:9b:ab:23:22:2d:9a:c8:
93:40:c7:bb:a8:07:8f:2e:64:55:9b:28:b7:3a:07:64:aa:8c:
68:f7:f4:bb:6b:c5:86:54:31:6f:dc:ec:73:88:57:53:13:ac:
12:02:d6:a7:d5:91:24:e7:02:ad:a9:b0:99:a1:4e:37:c5:93:
21:4d:89:a7:27:fc:82:e1:54:ae:55:62:6e:0b:0a:52:93:0b:
7c:ea:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:51 2025 by rpki-client