
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: RXbDY3vG3yWBSdPakEk8jIpjO2uwUz4MobusM0pMcoQ=
Subject key identifier: 66:63:43:39:2E:CE:3A:B5:35:4E:97:3F:83:A7:79:69:49:98:03:83
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01987E9CF2280326C068AEAE77BD7BE9E7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0E6A
Signing time: Wed 06 Aug 2025 09:01:11 +0000
Manifest this update: Wed 06 Aug 2025 09:01:11 +0000
Manifest next update: Thu 07 Aug 2025 09:01:11 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: NIJLlwZMalapzP9xLECKMN2yVhpNurMYiCvfkGyDq1Y=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:f2:28:03:26:c0:68:ae:ae:77:bd:7b:e9:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Aug 6 09:01:11 2025 GMT
Not After : Aug 7 09:01:11 2025 GMT
Subject: CN=666343392ece3ab5354e973f83a7796949980383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:95:bf:45:d5:b9:f2:e7:8d:42:cf:22:7b:
81:16:65:dc:02:dc:56:ee:7b:9e:8d:22:1c:cf:fd:
86:15:19:7e:58:14:58:ae:f8:71:13:fe:8b:27:ed:
bb:3d:46:fb:93:fb:5b:f7:34:34:f6:e0:59:b5:74:
2e:f4:8c:03:f0:77:82:ce:a3:2a:99:91:25:6a:fe:
81:ac:fe:4f:25:80:8f:39:4a:b4:45:c1:39:4b:f5:
d1:c2:d2:c9:7c:31:01:0e:f6:e8:50:f1:02:12:9a:
7d:e7:3c:99:53:da:fc:4c:7e:78:49:c1:28:fc:cf:
bf:1e:06:19:d5:15:04:d2:6b:ba:99:61:76:e6:22:
3c:b5:bd:95:d5:90:e0:a9:78:ae:fe:f6:fe:03:03:
f6:62:f6:f9:44:d0:8f:fd:6c:30:0e:00:ef:47:c0:
b8:81:81:a0:b1:b2:a6:25:dc:16:ae:26:5a:f7:06:
b0:6d:b1:e3:4e:25:d6:b5:dd:34:7d:14:12:63:d5:
4f:a4:4a:00:82:38:28:1c:d6:d4:69:9b:3d:6a:65:
dd:50:67:b7:1d:e5:56:1f:07:18:ae:9d:72:fc:70:
17:1d:de:ad:b8:69:e4:f3:19:fe:4a:bf:d0:69:79:
c7:43:db:83:5a:8b:ba:86:1b:cb:98:5a:de:11:41:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:43:39:2E:CE:3A:B5:35:4E:97:3F:83:A7:79:69:49:98:03:83
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:18:a3:04:d9:46:3b:cf:ad:2e:4a:57:bf:9d:7c:08:98:
7b:7b:8f:64:d2:4c:71:28:75:7f:77:3d:fe:a9:ad:ee:d0:bc:
14:e0:71:70:f5:96:fc:04:75:c7:a0:85:47:34:2e:78:94:a2:
9f:01:ad:21:14:5e:cb:63:f7:90:35:ec:16:d1:e5:0e:a5:9a:
79:b4:b3:06:5a:b8:81:b2:2f:49:a3:a8:e3:9e:64:13:f2:cf:
d2:10:36:96:2e:03:89:65:d4:c9:d9:c5:e3:7f:32:51:fd:17:
2c:87:7c:a9:46:73:43:2d:15:64:c1:03:fc:45:ee:28:54:b3:
07:00:fe:10:1e:74:f0:70:bc:6f:1f:ed:ce:dc:b5:5a:57:32:
57:8d:fe:c7:4b:3e:02:52:13:5c:ac:0a:32:26:e7:5f:a3:94:
e7:34:99:1c:6b:af:1f:07:bf:d5:37:e9:a1:56:30:6e:92:9a:
73:82:ff:75:91:64:a4:c5:25:2b:f3:d3:9d:96:bc:e0:cd:41:
24:37:c0:46:72:b3:32:f5:6e:4c:c4:53:74:76:54:30:69:c7:
b8:ca:05:91:1e:6b:dd:ea:cb:dd:43:33:e9:8a:d0:7a:66:50:
e0:4f:f4:2a:04:11:0e:a9:27:b6:30:ee:22:e5:8b:2e:2f:8c:
b5:03:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:22 2025 by rpki-client