Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: OlcppZ7GNFq+couQ9AClzsjgsmeZI2iy0BpNQifmZqM=
Subject key identifier: EF:42:C6:AC:9B:7C:31:27:01:3B:FE:9E:1C:E6:74:E6:8C:64:EE:A1
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019896A6F1C28B986A0A4B741B395A419573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 1306
Signing time: Mon 11 Aug 2025 01:02:59 +0000
Manifest this update: Mon 11 Aug 2025 01:02:59 +0000
Manifest next update: Tue 12 Aug 2025 01:02:59 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: mI3QKpDYAyE7poQtJum+DcD6v8XUMpAo924Wrmk5DlY=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:f1:c2:8b:98:6a:0a:4b:74:1b:39:5a:41:95:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Aug 11 01:02:59 2025 GMT
Not After : Aug 12 01:02:59 2025 GMT
Subject: CN=ef42c6ac9b7c3127013bfe9e1ce674e68c64eea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:4b:f9:87:36:ca:4d:2f:bf:13:ff:ce:45:
59:93:2a:d2:1f:fc:8d:eb:a6:dc:8a:e2:45:93:38:
45:c0:a9:40:74:06:28:c8:53:19:59:26:81:7e:4f:
f1:e4:14:79:fe:0f:05:8a:52:e9:60:d2:36:ce:5c:
1c:01:0c:90:80:25:a0:cd:33:1a:68:17:17:06:0f:
f6:18:9e:9a:eb:07:dc:43:3c:9d:3e:9f:0f:91:17:
7b:45:9a:99:a4:43:ac:a0:9c:44:fa:fd:6d:8b:56:
2d:80:67:5b:de:5a:97:c9:47:94:e1:05:08:d0:d1:
44:b6:8c:36:38:78:03:32:92:ee:8a:b7:47:eb:20:
50:75:ba:28:e8:c3:52:e6:de:94:a6:a9:91:80:f7:
89:26:06:57:27:af:4b:aa:0c:14:45:ad:7d:9f:f7:
51:1f:d0:7f:80:54:99:e8:6e:0f:f8:73:e1:f0:8b:
63:08:ed:75:3d:6d:a3:09:d6:19:4e:9f:63:b7:82:
ba:46:45:43:ad:cb:8f:0f:bc:e2:28:bd:93:bc:48:
fc:4d:2d:7a:fd:b7:83:c4:26:b4:57:42:b9:5d:b9:
82:4d:3e:9f:7a:1e:27:98:6d:46:94:b9:d0:23:b0:
7a:44:b9:5d:ac:a4:88:41:ce:45:5e:b4:fc:a4:01:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:C6:AC:9B:7C:31:27:01:3B:FE:9E:1C:E6:74:E6:8C:64:EE:A1
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:01:bc:b4:2a:4b:dd:12:5e:ca:86:65:d5:f4:bb:2e:82:
2f:71:c4:ef:0c:e5:0d:08:29:f7:a9:75:26:7d:79:f0:e6:c8:
cf:95:4b:ea:05:ae:63:8a:7b:01:62:6f:62:b3:cc:05:7d:8b:
93:9e:35:c1:4e:01:95:bb:7b:61:dc:f9:8e:e0:b4:b9:af:c4:
ca:36:ff:34:e7:35:23:5f:cf:3d:74:bf:d2:7f:18:c6:22:7a:
0d:05:4c:64:0c:3b:c1:c1:78:8a:cb:3d:80:60:e5:77:4c:22:
2e:c7:58:b0:7a:8c:08:5d:6c:f9:d9:9a:0e:57:2a:e7:21:b3:
82:14:11:00:1d:aa:d3:38:84:57:a3:58:c2:28:90:77:33:e6:
91:37:bd:c0:06:56:05:3c:dc:6b:bd:22:bd:a7:b9:38:dd:76:
b8:cd:fa:90:0f:66:61:17:7d:8e:83:01:b6:d3:9b:da:3e:b2:
06:df:2b:ab:fd:82:d3:de:2a:42:3a:0b:c8:83:bd:65:dc:98:
7b:03:c6:dc:5a:ea:1c:3c:23:58:89:90:57:e2:b1:b2:1c:2e:
73:9c:17:3d:48:2e:f1:6c:bf:bb:fa:07:28:bf:d6:81:f9:5e:
2a:e8:b3:4b:88:10:33:ec:1b:91:06:32:3b:d2:76:b2:f3:20:
f6:a6:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:00:54 2025 by rpki-client