Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: qyMmJ05B9yoHowiCHMQeEaAlDruC2q2je3NdkgZ4Er4=
Subject key identifier: D4:45:78:33:F5:72:56:85:95:D9:49:97:D2:9D:FE:B2:72:E4:20:D9
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 01989ECD1EFBE159A441FD4E668A99A365B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1633
Signing time: Tue 12 Aug 2025 15:01:39 +0000
Manifest this update: Tue 12 Aug 2025 15:01:39 +0000
Manifest next update: Wed 13 Aug 2025 15:01:39 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: e7VAhdChDlcNNP/TAraMCn1v55GOdbTVFNJqO8FoQQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:1e:fb:e1:59:a4:41:fd:4e:66:8a:99:a3:65:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Aug 12 15:01:39 2025 GMT
Not After : Aug 13 15:01:39 2025 GMT
Subject: CN=d4457833f572568595d94997d29dfeb272e420d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:c0:d9:e0:43:3c:4d:3f:7a:05:93:f5:bb:
d8:da:c5:47:56:83:ec:64:84:38:f6:58:35:a9:0c:
9a:b0:52:2e:f0:03:f8:a8:fe:88:ef:41:7e:03:5e:
41:83:4f:2b:77:5d:e6:2c:96:60:30:16:ce:88:ef:
f2:6c:0e:79:7b:5f:7f:56:14:7c:7d:68:a8:2f:0f:
aa:82:46:4a:64:ae:54:8d:fe:83:9f:77:bb:cf:9b:
74:cc:43:91:84:b7:6a:27:95:29:af:2d:ba:09:23:
e1:6e:2f:83:d8:0a:84:e7:70:84:65:5a:88:88:fe:
c4:a6:b3:72:32:be:c1:f4:44:32:d8:91:da:fc:5e:
8d:96:a6:a9:04:5b:06:b4:75:3e:e9:a1:3c:04:77:
e8:e8:3d:3f:b2:93:ef:11:14:82:0a:9b:a2:87:a7:
d8:07:84:b4:88:5d:11:d8:e3:f0:cb:83:a6:b8:34:
8c:35:73:4c:84:b9:7d:5d:49:2a:77:85:26:f2:f6:
98:33:1d:fe:f1:be:ef:5a:eb:b7:63:29:fb:fb:da:
6c:7b:02:06:97:e5:e2:31:97:8b:86:1f:7e:e8:c3:
29:c4:55:4f:62:fa:5a:43:8d:72:05:e5:96:aa:13:
1d:57:7d:c6:42:8a:5f:2f:e2:4e:2e:ef:66:58:86:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:45:78:33:F5:72:56:85:95:D9:49:97:D2:9D:FE:B2:72:E4:20:D9
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:e8:de:94:e7:90:0d:5a:fa:5d:b0:f2:03:7b:4b:eb:d2:
4b:d7:03:61:71:a8:28:d9:b9:94:27:ff:c4:00:68:16:65:6a:
2b:8f:4c:74:5b:1d:5f:c2:6c:26:f2:ab:e6:d7:f7:45:fc:95:
df:9f:9a:0a:15:be:ed:8b:51:d3:ec:7b:91:b0:8c:ba:e1:0f:
fb:a1:f0:79:67:41:16:2c:8a:cb:98:53:f6:2e:05:e3:b9:b6:
66:c2:05:23:12:6c:32:34:25:96:dc:16:d8:20:d7:18:14:37:
ac:32:be:ae:ab:a9:1f:d5:91:07:07:f5:54:2d:34:14:f4:fe:
06:ab:a5:1b:b7:6c:d8:56:c3:18:7e:e2:94:5a:48:8d:1b:2a:
0d:5a:3c:22:2c:0f:26:fe:4e:8a:0d:c0:20:68:ef:90:b0:a2:
9a:17:e3:9c:9e:26:27:06:34:e5:81:18:63:75:64:f0:95:3c:
ec:1d:74:60:29:77:5b:67:40:77:da:6c:95:63:9b:7e:e4:28:
61:ec:38:35:7d:df:7c:b5:ae:cd:b3:d4:e7:57:34:67:6d:43:
24:6c:17:4c:45:4e:61:5c:36:3e:3a:d4:5b:66:a2:ee:9c:90:
7f:c1:c1:61:ac:07:b4:5c:28:8e:34:99:5e:b7:f5:ba:d3:23:
ac:17:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:57 2025 by rpki-client