Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: QiY3IdMuJ4fMP/AcV6AWP8YkZOSKyXbCnbE8EPrZ5xY=
Subject key identifier: 03:AC:9F:39:E2:8F:23:4F:FB:67:8B:01:51:0A:3C:97:DE:0A:2F:28
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 01989ECD291DA613821A859CF1E807434858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 06C8
Signing time: Tue 12 Aug 2025 15:01:42 +0000
Manifest this update: Tue 12 Aug 2025 15:01:42 +0000
Manifest next update: Wed 13 Aug 2025 15:01:42 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: 9QYm37jA1zl4vyyHS2sRPj+BLFgf+PHh06yTHx3CKPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:29:1d:a6:13:82:1a:85:9c:f1:e8:07:43:48:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Aug 12 15:01:42 2025 GMT
Not After : Aug 13 15:01:42 2025 GMT
Subject: CN=03ac9f39e28f234ffb678b01510a3c97de0a2f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:48:8a:74:03:16:6c:ed:c1:54:0c:17:1f:
04:9f:40:a6:cf:4f:92:78:03:1e:d3:68:cf:34:80:
43:c9:be:d6:02:c7:a5:18:4a:80:3c:a4:45:d4:c8:
9e:ba:0b:3d:26:70:b5:1d:15:4f:68:c6:77:4a:f3:
ba:64:98:de:dc:c3:23:1a:2a:01:08:e1:4f:6e:d7:
9a:6c:0b:73:7c:a0:cc:f3:c3:13:91:b3:e5:d2:2a:
26:62:98:d9:01:a3:21:98:5c:f8:60:76:a4:59:d2:
e6:aa:69:6d:9d:41:82:3f:7b:8d:79:1f:f9:03:43:
13:05:96:c3:63:ad:15:57:b3:c4:1c:fb:aa:23:3f:
ed:f0:8c:f4:ba:f3:37:b1:5c:17:08:33:cf:8b:4d:
b2:44:7e:0b:91:f0:fd:46:79:90:81:ed:d4:5c:e6:
66:e4:44:fc:e1:ec:49:9a:e8:d8:bc:2e:0b:71:74:
50:9d:dd:b7:ee:5f:4c:0c:1d:c6:fc:b2:f1:0a:8d:
7e:02:6a:ec:07:ae:b7:16:59:04:a8:c1:6f:7d:46:
06:18:24:26:36:68:cb:a2:a0:30:17:c1:c0:7b:32:
a8:99:99:a0:85:f7:45:73:a4:45:b9:26:87:80:0e:
25:45:ca:e4:ef:c9:a9:07:1b:54:f9:fc:28:3a:f1:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:9F:39:E2:8F:23:4F:FB:67:8B:01:51:0A:3C:97:DE:0A:2F:28
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:16:ca:84:25:5f:9b:b7:4d:e3:0f:7e:98:0a:39:ec:03:
2b:0e:6e:9c:81:c0:1f:3e:5a:8d:ea:ac:a7:73:20:08:5f:37:
0b:a2:75:31:1e:92:67:a5:de:c6:0d:75:da:d6:5b:c3:46:8e:
90:80:63:e4:00:d2:82:55:51:10:71:c0:69:10:a5:1e:4d:a2:
da:69:4e:1d:81:c4:dc:be:97:0c:3e:d8:29:20:62:4a:b9:9b:
a7:44:bd:73:5f:23:bc:0c:81:4e:eb:58:74:91:8a:ff:a5:f5:
42:2a:ca:8c:57:3f:b4:2c:3e:ed:57:76:7d:9e:58:f5:fb:c0:
23:e0:70:15:af:fa:c5:5a:2a:1c:84:62:8a:5e:e1:67:23:cf:
bd:a4:d0:1c:b7:e8:75:5d:cb:24:d9:83:56:93:62:86:bd:98:
04:69:db:34:c7:e5:4a:19:fb:9c:6c:4e:28:0d:2e:2b:1c:e8:
dc:61:8b:4a:55:39:f5:d4:b6:38:2f:eb:a1:f2:d4:43:d3:ca:
12:9c:87:9c:ad:d1:ee:f0:5b:99:52:32:3f:20:28:27:c2:2b:
82:d7:74:35:bb:a3:79:c4:4e:c0:8a:50:e9:2e:4f:65:9c:9b:
7e:6b:f1:f5:c5:c1:40:f0:aa:7e:a3:40:86:21:ea:8e:4a:dd:
b3:22:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:08 2025 by rpki-client