Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: sdbZpWlo9EYZqhoJwSBeoBA70FQQ4wjShVTXPUxcBQ8=
Subject key identifier: 84:3E:54:AB:B7:A6:00:51:6C:83:37:8B:DC:BE:5A:90:4F:2F:15:83
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019874BE4BD044A3FFFD9FB8872F1E22452D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 12DA
Signing time: Mon 04 Aug 2025 11:01:24 +0000
Manifest this update: Mon 04 Aug 2025 11:01:24 +0000
Manifest next update: Tue 05 Aug 2025 11:01:24 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: q8R4wfs8LK+fToH3Y9Ad0iQgjWrv+etzbmmuCoAMzCY=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:4b:d0:44:a3:ff:fd:9f:b8:87:2f:1e:22:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Aug 4 11:01:24 2025 GMT
Not After : Aug 5 11:01:24 2025 GMT
Subject: CN=843e54abb7a600516c83378bdcbe5a904f2f1583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:fc:41:a9:0f:10:12:35:e3:fd:7a:1d:f8:
22:07:ce:b0:39:49:18:f3:92:9d:20:3f:68:b9:76:
f4:2d:f2:2a:31:f3:4c:32:7a:8f:be:22:57:8c:7c:
a9:03:0b:66:e8:d1:0d:83:36:35:4f:7e:ae:90:d9:
16:b4:08:36:09:fc:9e:45:f8:09:c3:55:2b:9f:73:
1a:7b:ef:7e:20:ec:e0:ff:1d:15:dd:99:ee:13:cd:
a1:f5:32:25:65:2c:5c:03:b8:8f:0c:43:c2:3d:98:
87:92:78:d4:ab:3c:11:9a:0c:66:36:c4:9c:98:0f:
f7:39:02:44:00:46:4d:ca:03:b7:a7:79:46:c9:8c:
36:6e:98:f0:6a:c6:48:02:72:ee:b1:fd:d9:de:e6:
89:c7:8c:c9:a3:c8:6d:82:27:26:08:75:2b:84:0f:
a1:a1:e6:10:06:31:2a:ae:a1:c6:b3:2a:e9:ad:b5:
dd:99:d0:1c:22:57:6b:34:35:aa:6f:d8:85:80:5f:
17:b0:7e:5b:db:7d:00:63:ba:f1:6a:70:80:81:97:
35:87:50:c1:56:10:37:fb:45:c9:76:f7:87:7f:8c:
1e:2f:92:f8:f7:f0:5a:36:ae:83:4c:70:ec:28:9a:
55:f0:9c:57:29:04:2a:33:73:18:4d:c2:15:62:99:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:54:AB:B7:A6:00:51:6C:83:37:8B:DC:BE:5A:90:4F:2F:15:83
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:fe:e5:e0:6b:e3:0d:4c:c8:1a:50:bc:9f:76:a1:b9:19:
82:ad:b2:4f:e8:f0:5f:de:86:29:3d:4e:3b:ca:99:d2:94:e6:
83:21:b0:86:b3:a2:0a:a0:c5:27:fc:b9:7e:e6:11:7f:71:25:
21:9b:27:e5:23:1e:df:c2:e8:36:ee:d4:a1:6f:28:48:05:1c:
6d:7e:e6:a0:fd:f8:b2:d1:25:2d:cd:e4:08:d3:d4:19:16:b4:
fa:21:8a:a4:93:d8:6c:70:7d:81:8f:c1:c9:24:cd:c3:3b:e8:
d3:48:e5:16:00:90:67:2e:02:11:2d:8b:ca:84:de:12:0f:3a:
a7:d4:5d:43:e6:a2:15:4d:17:0b:5e:a6:e3:e6:fd:84:32:b8:
80:eb:e0:29:36:c1:db:0f:21:25:2f:e9:44:fa:2b:55:42:4a:
eb:c4:04:2d:89:6a:bd:1c:64:0e:2d:86:83:41:c2:65:6d:28:
bd:b8:be:8b:6b:f6:cc:4a:f3:6e:d6:d6:1f:30:c2:80:77:55:
a9:3d:f5:29:9b:67:eb:3d:ae:2b:0c:94:f6:8c:9d:54:e4:40:
48:98:35:7b:f9:d6:42:b8:5b:56:f2:ae:58:d9:c1:7f:9a:1f:
62:5d:cf:db:0b:8b:ec:a0:fd:cc:4c:fd:c3:c9:d5:a5:57:58:
ea:0c:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:42 2025 by rpki-client