Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: g1C02JIKluora6ySOE7mUkye2+CKGGcVdKklIHXSW2A=
Subject key identifier: 09:31:32:83:F7:8B:D4:29:8F:C3:AA:86:56:0F:95:AD:C6:0A:F1:76
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 0198982527496CA43894A961102D32B45F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 13D0
Signing time: Mon 11 Aug 2025 08:00:28 +0000
Manifest this update: Mon 11 Aug 2025 08:00:28 +0000
Manifest next update: Tue 12 Aug 2025 08:00:28 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: fM+r07tz1H1E/hj7f2kPK93HZBlrHER6rKf5ktIVubk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:27:49:6c:a4:38:94:a9:61:10:2d:32:b4:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Aug 11 08:00:28 2025 GMT
Not After : Aug 12 08:00:28 2025 GMT
Subject: CN=09313283f78bd4298fc3aa86560f95adc60af176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:13:6b:7a:db:3c:9d:9e:fb:58:a3:d1:24:
b2:ca:44:69:a4:f2:04:08:8e:42:89:cc:32:c8:a0:
20:76:ea:74:3d:5b:b8:5a:3a:e2:f3:a8:2d:85:95:
d1:b5:f8:2b:96:1d:79:08:e4:bd:c1:8c:0e:25:52:
88:f5:06:da:bf:62:ed:38:0d:52:7a:1a:f1:b5:2e:
65:4d:6d:da:7d:ef:52:64:d1:82:eb:7e:e5:4b:57:
e5:00:8c:ad:51:c6:88:b3:31:8b:75:49:a5:89:1c:
28:50:2d:57:2a:cd:48:2f:41:f8:d7:4d:28:9b:df:
9a:74:47:41:b6:79:cb:89:79:a9:76:b2:99:b5:ac:
4a:a3:2b:49:d4:06:20:54:75:e7:6e:15:df:eb:e1:
06:bc:78:20:d6:c1:97:d0:14:ff:c0:f8:00:bb:52:
01:6a:c1:4b:85:d2:49:1f:cf:3d:97:23:bd:42:18:
de:2b:26:07:c4:c7:15:5e:02:5e:10:e0:fb:7f:d2:
d1:28:f4:29:20:d5:76:55:c5:ec:b2:d0:6b:cf:c3:
1c:d2:45:72:c6:9f:34:7f:d0:06:4a:b2:19:d1:0b:
49:d9:58:5f:07:07:2b:f6:99:f0:50:a3:cf:a4:79:
15:9a:06:00:d0:33:02:12:db:a4:88:04:f5:31:e1:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:32:83:F7:8B:D4:29:8F:C3:AA:86:56:0F:95:AD:C6:0A:F1:76
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:43:e2:46:2f:2a:fa:86:5c:3a:95:cf:bf:45:bb:dc:4b:73:
08:23:d6:3c:01:7d:33:bc:94:46:b3:e8:b9:50:08:e0:70:33:
f8:16:9e:8a:60:29:e4:ce:1a:2a:f8:49:e1:6a:7f:04:b3:a4:
91:84:27:50:2a:59:12:81:29:b3:0d:3a:98:de:e8:eb:3a:c8:
ed:c4:31:58:e8:b7:84:bf:42:fc:e2:d5:0a:e1:01:ea:15:4f:
53:4a:eb:8e:6e:4d:cb:25:7c:ce:74:69:0a:0f:00:7d:2c:ef:
f3:c7:96:83:2b:98:a2:ac:eb:84:a6:d5:34:08:84:16:85:89:
9c:41:de:69:7a:37:f6:15:d0:bb:db:f6:ac:bf:02:78:98:44:
f3:0f:2c:0d:f5:6c:4e:ec:fb:f8:50:e2:fb:3a:38:19:35:84:
24:25:77:e3:bd:1b:fd:80:4c:b8:b2:08:86:30:47:02:3b:df:
3e:8b:d5:ef:fb:fb:09:a3:f0:fc:bd:f9:35:04:97:f8:0a:e9:
30:9d:3d:6a:c5:b4:0a:3e:8f:18:75:06:2d:81:d9:d2:97:86:
6f:e6:d7:8d:3c:75:83:66:f8:4c:d3:bf:98:ba:6a:13:ad:57:
44:85:3e:3f:15:54:7e:0b:6b:19:17:82:c7:fc:fc:6a:a1:14:
c4:1a:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:24 2025 by rpki-client