Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: tKJbfBSGNRfJm/HVuZFi4ZKCl9d6/yd7wnTTAY9Qpec=
Subject key identifier: F6:CC:5E:2F:67:C7:0F:14:E6:75:F1:88:CE:0F:96:8B:CD:C6:DC:B7
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 019872CF1E1BB802B6C6E0655D05835E5472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 02:00:32 +0000
Manifest this update: Mon 04 Aug 2025 02:00:32 +0000
Manifest next update: Tue 05 Aug 2025 02:00:32 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: u4VdRmvg+rTcIShqYcmTIUx9cToh7S4adNXgFTfN5rA=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:1e:1b:b8:02:b6:c6:e0:65:5d:05:83:5e:54:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Aug 4 02:00:32 2025 GMT
Not After : Aug 5 02:00:32 2025 GMT
Subject: CN=f6cc5e2f67c70f14e675f188ce0f968bcdc6dcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:4a:9d:9f:1d:35:bb:2c:bb:0f:a2:39:ad:
81:79:48:f8:c1:33:e4:07:ce:8a:b2:da:9c:23:a5:
ad:1a:76:e6:30:27:e8:d5:17:59:22:bf:06:2b:91:
ed:fd:70:91:61:c9:1d:f3:fe:07:df:69:28:30:13:
00:6a:b0:c1:fe:3a:dd:17:5a:85:73:40:a9:15:a8:
ca:89:c9:2f:02:a6:2e:c5:d6:cc:2c:94:e9:7d:4f:
02:88:34:bc:e0:53:69:48:2f:1d:13:2f:ae:f8:31:
a1:57:3e:d2:e8:f0:9b:6e:69:34:f2:5b:c7:70:6f:
7d:79:d4:a8:fc:5a:d2:ac:3d:55:71:fa:6f:f1:71:
98:f5:e5:1f:d6:fb:45:a4:a9:23:14:39:2e:17:f1:
7f:2a:ad:89:88:6b:1a:a0:6a:6d:db:a8:59:94:6c:
94:6f:f0:0f:13:09:8f:d2:71:74:e2:7f:06:3e:8a:
b6:33:01:dc:d0:5d:50:e2:c4:c6:45:e4:1c:02:8d:
fc:0d:1d:7a:0a:c2:57:52:c6:3f:d9:8e:ef:8f:2d:
b7:da:5f:ca:8d:a8:01:1f:02:f2:58:43:ac:e3:8b:
82:cd:ae:73:87:87:5c:1c:d1:7b:fa:20:24:58:9e:
f0:35:a2:8a:f3:be:0a:3f:e9:49:3e:0c:fe:d8:ba:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:5E:2F:67:C7:0F:14:E6:75:F1:88:CE:0F:96:8B:CD:C6:DC:B7
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9a:c8:15:ac:02:7e:ea:79:70:65:45:03:b6:2f:a4:9b:84:
97:c9:1a:98:b3:9b:ed:76:5a:cb:4b:6e:e4:fa:4b:26:82:8f:
fd:75:03:5c:8e:55:65:fe:17:8e:b9:50:26:a9:86:d3:6f:b4:
1e:52:80:48:23:af:aa:b8:b6:a2:82:34:30:7a:00:d1:8f:d7:
4b:6b:5a:e1:3c:32:5e:9f:5e:7b:53:58:26:34:ce:a6:1a:92:
8e:fd:2c:28:df:b0:4b:1c:2b:ec:f2:b5:b6:8a:9d:41:43:90:
dd:bc:a9:73:e0:0d:6a:95:dc:f8:59:6e:1e:91:dd:2b:f3:44:
69:7e:f3:e3:55:cc:b1:37:67:08:1e:80:80:72:94:7f:f3:09:
7c:bc:88:1e:86:0a:ed:c2:1b:6c:bf:d9:b6:e2:c5:8a:bc:0e:
b4:61:b0:24:3e:1a:5e:4a:64:03:49:c6:a3:b7:7b:f0:7d:df:
ae:cb:5a:7b:22:e8:0f:fa:f4:61:d3:fc:e7:dc:3a:95:aa:6f:
31:ab:e3:64:f3:2a:3c:f8:db:13:6d:d9:cf:49:8e:b2:a8:c7:
72:03:13:80:5a:0c:29:87:a3:e1:81:2c:25:71:f8:1a:6d:41:
0a:f5:1a:74:18:10:13:69:f8:0e:71:e4:4c:a3:7e:74:64:d9:
b7:6c:61:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:26 2025 by rpki-client