
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: LH4t2NDozXY7AjbV81tTxF0zQK4lSyoE2VkvatiXoRU=
Subject key identifier: 6F:B7:14:5E:5E:B0:AF:F3:A8:23:F0:4B:83:92:7E:6F:C4:F1:86:6A
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019880C20E1F593CFC715506F3D6F86FF3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0E7F
Signing time: Wed 06 Aug 2025 19:00:57 +0000
Manifest this update: Wed 06 Aug 2025 19:00:57 +0000
Manifest next update: Thu 07 Aug 2025 19:00:57 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: AzQ1SZWSOEEkX5ajuGXqWssbpqu5/Lg05Z9Emgx9RJM=)
2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:0e:1f:59:3c:fc:71:55:06:f3:d6:f8:6f:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Aug 6 19:00:57 2025 GMT
Not After : Aug 7 19:00:57 2025 GMT
Subject: CN=6fb7145e5eb0aff3a823f04b83927e6fc4f1866a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:ef:47:07:41:04:9b:aa:7c:6e:da:19:1b:
30:5d:34:b2:04:dd:35:da:2a:18:f9:58:67:bd:6f:
e2:66:48:49:3d:75:a4:db:ad:68:50:99:15:6f:b4:
16:59:6a:ef:74:d0:8e:c8:7f:48:c3:17:e8:c5:3d:
34:78:c3:e7:0b:ed:d8:ce:18:a3:c5:01:69:29:ad:
75:0c:64:4d:3d:28:24:91:0f:93:d5:b5:d6:7a:cb:
cb:58:35:b8:00:a3:5b:8d:4f:13:9e:08:10:ff:ab:
cb:e6:d6:50:7f:2c:be:9c:9c:59:1c:1f:f2:32:e8:
17:ca:a1:a3:33:a0:4f:9b:b2:09:b5:b3:52:e1:5e:
36:55:0d:55:8c:d1:9e:e2:ca:1e:4f:ad:00:7d:42:
9a:cb:a9:14:37:fb:41:58:fd:3e:e1:2e:d5:0c:3d:
4d:28:47:fa:b4:40:17:f1:6c:2c:28:46:ab:9a:89:
9b:0c:ba:39:4a:0f:d2:12:a0:c8:a5:3f:df:16:59:
62:ac:dd:07:80:25:f6:80:e8:88:3a:36:2a:ce:d1:
58:a6:d2:1f:47:a5:a6:b9:7f:ca:31:4b:50:2a:82:
c4:ae:2f:83:b0:10:f5:34:3c:df:2c:ae:7d:61:1c:
a1:a3:bb:66:14:2a:ad:12:e0:d2:74:48:ea:bf:39:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:14:5E:5E:B0:AF:F3:A8:23:F0:4B:83:92:7E:6F:C4:F1:86:6A
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:c8:fd:ec:07:85:ed:37:cc:1e:19:12:b5:79:1b:20:89:
b9:c1:55:13:4a:1e:09:54:8c:13:a9:71:2d:db:22:a7:50:33:
66:a1:6e:ff:22:e7:16:0a:83:dd:0c:e4:db:cd:d6:9d:a8:f1:
e6:59:9f:0c:e7:52:7a:1b:76:20:de:f1:c8:74:8f:10:1d:f7:
02:a4:2c:b2:af:97:15:92:3a:67:f2:ad:f2:09:9c:1c:9e:3b:
73:93:74:af:01:46:cb:dc:f8:55:7a:6d:d7:04:06:c4:2c:b8:
a7:b8:87:b7:d1:34:fb:97:8c:78:56:b3:32:07:0f:76:4a:77:
e2:d4:81:c3:d3:81:1b:ed:e4:8f:88:fd:69:12:25:9e:c9:fc:
83:6c:25:d0:7a:2e:1f:39:09:1d:ff:08:d0:37:e2:ea:60:26:
cb:e0:33:fd:b5:23:8b:d5:c7:6a:c4:35:4c:50:3e:90:85:0e:
d4:d3:04:ac:8a:2c:91:22:01:16:2e:8d:9e:ac:1b:cf:06:96:
f0:89:35:17:91:9c:6a:56:bd:f2:12:a5:b0:fa:6f:1b:63:77:
82:5e:ab:c9:4e:97:4d:83:cf:da:fe:1b:8e:06:3a:11:ee:a2:
cf:6c:6e:1c:b0:2c:41:46:45:e8:5f:80:7a:57:30:28:61:c0:
cd:14:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:46 2025 by rpki-client