Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: NFX28xaR8ZBcqYk8yME1Ztuj9wsLKnNEZGuYaS31AY8=
Subject key identifier: CC:B9:8E:9A:CF:6C:9C:D0:8C:FC:D6:60:C2:6C:F4:A8:BE:C3:D7:C8
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019873070E86456CBE6F73CB2607857F3EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0E67
Signing time: Mon 04 Aug 2025 03:01:38 +0000
Manifest this update: Mon 04 Aug 2025 03:01:38 +0000
Manifest next update: Tue 05 Aug 2025 03:01:38 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: d4vtfFTfPXYUo7g3LfqdizjHFpp/nAA4sSoIzRn8/Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:07:0e:86:45:6c:be:6f:73:cb:26:07:85:7f:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Aug 4 03:01:38 2025 GMT
Not After : Aug 5 03:01:38 2025 GMT
Subject: CN=ccb98e9acf6c9cd08cfcd660c26cf4a8bec3d7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:16:ff:87:1f:52:59:fd:c5:89:08:f5:fc:
ec:64:9d:46:95:95:a0:6c:e6:f8:04:c7:bf:98:ac:
b9:69:7a:1f:60:68:ff:0d:3b:14:95:18:1e:4f:f3:
0f:a3:47:b9:4b:d5:35:83:da:7f:bb:24:8f:0c:a9:
ca:fd:22:45:38:17:d9:63:2e:a6:c1:b2:9e:58:8e:
73:7a:0b:13:30:b3:16:7c:5b:f2:71:be:80:33:2d:
e0:81:1d:cf:9b:f7:d0:48:44:8d:07:a8:e4:40:b7:
77:bd:19:7a:6d:a1:9b:27:14:80:df:6b:5c:b1:34:
23:90:72:47:62:50:de:5f:65:4a:19:4f:b4:cc:7d:
fd:fd:a5:a5:d1:6e:5c:53:dc:bc:f9:6b:31:9b:67:
31:82:98:48:81:11:ee:a9:c9:04:67:55:ca:28:02:
bd:ef:fe:a7:44:f6:72:eb:a0:43:49:67:9a:2c:5d:
8e:ed:c7:d4:4d:7d:b9:46:9e:38:10:51:41:49:1e:
59:aa:da:cc:b0:e7:7b:c5:dd:bc:fc:a7:84:b6:a2:
de:6f:a0:fc:fe:03:97:f0:bb:ee:2f:74:77:59:df:
f6:43:db:a6:f8:d2:97:1c:e6:24:e6:5a:86:50:5a:
71:98:15:93:54:86:e9:6a:a6:93:1f:0a:bc:50:33:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:8E:9A:CF:6C:9C:D0:8C:FC:D6:60:C2:6C:F4:A8:BE:C3:D7:C8
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:7a:48:6c:84:a5:b1:12:03:0f:3b:d4:9d:ed:3b:b4:1d:
d5:60:18:89:cd:0b:00:b4:b3:c2:05:56:6d:5a:35:d9:26:96:
52:fd:81:f8:88:5e:d7:9d:a5:e5:82:d1:9b:cf:cd:cb:7f:ec:
fb:ef:5d:d8:4d:f7:0c:5b:16:41:73:d9:c1:40:48:c8:6b:41:
67:57:1a:81:97:29:a0:43:58:ea:1d:98:ad:7b:01:c9:01:26:
55:37:83:b2:85:a5:15:17:01:5e:5a:bf:6a:e6:92:54:8f:de:
0a:eb:f2:ba:06:65:87:ea:43:d9:59:63:92:56:2c:30:d5:68:
a6:5b:68:aa:18:a9:5f:25:ee:95:d4:38:5e:db:0e:ca:5c:32:
f7:d6:26:cc:60:57:11:e7:5a:7d:9c:5d:41:f2:18:66:3a:58:
6c:da:85:a9:00:37:57:93:b4:82:85:16:06:ae:aa:3f:1e:3f:
37:ca:27:5c:50:8c:e2:7a:3a:ff:a9:16:dd:57:9f:e1:93:b5:
fe:ff:e5:09:96:30:b9:f7:c2:7c:32:f7:4b:3e:86:9f:e6:fa:
32:e4:b5:0e:1e:e0:f5:6f:f6:59:64:e5:f0:52:c3:fb:41:49:
62:eb:b6:3c:8a:6d:be:26:c7:e5:49:01:3a:a1:ed:36:08:90:
e8:e9:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:36 2025 by rpki-client