Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: atmx7sGWAL0LhBpNrFNAh72GCF5beFJ/0meTT1rXUpY=
Subject key identifier: E8:B4:FB:43:BD:9D:5B:1A:C1:FA:54:D1:D8:40:2B:D9:46:35:46:0B
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 01989ECD139928278E80F9E9CD2AD9E96315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 15:01:36 +0000
Manifest this update: Tue 12 Aug 2025 15:01:36 +0000
Manifest next update: Wed 13 Aug 2025 15:01:36 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: BP5ZvTmsy4MqjXcyT7FnugxSfaTaAeV9QIjCUais58M=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:13:99:28:27:8e:80:f9:e9:cd:2a:d9:e9:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Aug 12 15:01:36 2025 GMT
Not After : Aug 13 15:01:36 2025 GMT
Subject: CN=e8b4fb43bd9d5b1ac1fa54d1d8402bd94635460b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:7f:b0:e7:2b:ad:9d:a8:ea:9b:27:35:dc:
32:4a:33:36:26:93:44:f9:de:e1:82:af:ac:1d:42:
38:80:75:87:ab:51:fb:60:09:67:4d:2e:8d:07:dc:
69:22:f1:7f:dc:18:db:69:e8:21:39:6b:fa:45:2e:
6d:76:7f:3c:bb:e0:50:06:db:5c:f9:40:1f:31:ff:
1a:63:e8:53:02:13:05:b8:2f:7a:16:d2:3a:36:dc:
55:55:86:f2:4b:a7:2c:59:e3:d2:34:8b:80:bc:9c:
2b:b4:ea:3b:df:f5:74:a4:8f:04:81:f8:d0:52:21:
bd:9a:d6:cf:cf:ac:90:e3:a2:80:2f:b3:42:3f:2e:
5d:54:4d:48:b8:23:21:c3:c9:87:ed:59:b1:1c:da:
5d:dd:a9:5e:56:71:d4:5e:78:3b:74:fa:3a:00:e7:
1a:8d:5a:d2:bf:79:ca:4f:cb:31:6d:98:17:f4:04:
58:9a:31:6e:3e:ee:b6:e0:6c:e0:99:48:a5:ff:a2:
7d:8f:e8:35:07:e7:de:d2:67:db:1b:6c:4d:80:51:
47:8e:68:1d:65:78:23:e5:c0:0e:4a:ee:3c:7d:8d:
da:8d:93:cc:1a:24:eb:17:cd:16:ae:e4:c0:7c:25:
47:8c:11:ad:8e:ea:23:86:5b:53:8e:4d:0d:08:28:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:FB:43:BD:9D:5B:1A:C1:FA:54:D1:D8:40:2B:D9:46:35:46:0B
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ae:9e:b3:ce:79:f6:be:58:44:6d:4d:42:b5:a1:1b:2e:1b:
f7:cd:a6:4d:8f:ca:c3:c1:7a:e9:8d:dc:3e:d0:6e:62:09:55:
a2:a3:47:8b:a3:b3:63:f8:0c:c3:d5:3b:38:1b:73:fb:3f:20:
a4:e3:67:cf:57:0e:79:49:32:a3:7c:bd:21:41:f4:fb:dd:15:
81:45:49:67:67:25:33:b0:ef:a1:f7:89:3e:c9:54:84:b5:c6:
5a:37:61:df:aa:e6:e8:4b:4f:f9:19:ba:cb:cf:29:56:53:5e:
8e:eb:43:0b:e7:01:75:f5:29:66:e5:38:2c:da:f3:72:10:ac:
c7:0c:fe:20:6d:65:41:2d:90:83:a3:b1:b0:7d:15:a3:ba:e5:
49:04:4f:e2:29:36:04:62:7d:66:ed:87:f2:4d:4b:89:b2:07:
c2:e2:73:ab:ca:03:87:83:3e:70:33:cf:28:a8:a5:14:ea:ed:
61:b5:4c:ca:a1:0c:f6:bf:2d:96:b4:71:c7:a4:34:a0:90:34:
25:26:7b:98:22:60:a5:34:6e:ba:ba:f5:65:2c:6d:f2:3a:ed:
24:10:85:1c:2e:2b:8d:f4:4f:d7:62:43:bb:b6:a4:af:bf:16:
95:6d:2d:35:4c:bb:ce:c5:1a:d5:0c:ff:38:6c:e5:54:f0:3f:
9d:80:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:39:33 2025 by rpki-client