Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: CslgdSx87qCNPuJlJGPqQUGe9wlcAmgb0G06dJAk9yM=
Subject key identifier: FE:31:3E:DC:60:D4:C4:C6:27:54:39:D0:00:42:4F:A6:8F:0E:FA:95
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01987D8B756D82C1DFA4CAFA5FB421A53432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 04:02:28 +0000
Manifest this update: Wed 06 Aug 2025 04:02:28 +0000
Manifest next update: Thu 07 Aug 2025 04:02:28 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: HAei3Aj6z2O3jBfWVvm++UKuuL2cWxb9HDw4rTVBfwE=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:75:6d:82:c1:df:a4:ca:fa:5f:b4:21:a5:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Aug 6 04:02:28 2025 GMT
Not After : Aug 7 04:02:28 2025 GMT
Subject: CN=fe313edc60d4c4c6275439d000424fa68f0efa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:ea:18:54:8a:a5:39:e7:b9:42:ca:84:a9:
2e:d6:28:c4:1a:1e:12:48:38:95:f9:1f:ac:f5:9f:
26:2f:ff:7c:37:c1:6b:18:82:b8:9e:4a:32:90:06:
e4:9c:b6:b5:0d:75:49:81:2b:a7:28:26:5e:78:05:
17:76:67:da:3a:66:d1:c5:fc:98:c5:9d:86:bd:39:
fc:be:2c:f2:df:3a:57:2f:43:1c:47:99:fe:fd:58:
a8:fa:be:52:a5:9b:39:24:ea:90:06:56:f5:2e:2d:
4a:a3:e2:6a:a7:51:b2:5c:97:11:c0:7e:6c:30:90:
c2:35:aa:03:71:12:0c:e2:bb:13:ab:a6:75:ed:a9:
6f:b0:b7:81:64:aa:ea:20:dd:6d:32:8c:f0:e1:b2:
78:52:51:55:8a:40:cc:ba:f8:3c:4e:43:0e:04:9f:
04:4d:18:2a:41:96:12:0d:e3:7d:2c:b8:41:72:17:
9c:09:d7:4d:7c:35:c7:2c:c9:f8:37:da:36:ed:90:
28:00:d6:20:7c:6b:b6:cc:dc:ea:dc:3c:87:a1:5e:
99:ee:1d:f0:c1:33:f3:71:ba:e4:21:8c:0b:0a:d3:
9e:01:c3:41:91:03:ad:6b:fe:a4:10:84:8f:6a:c3:
5c:2d:d6:4b:8d:42:bc:da:7d:dc:80:8e:d8:c6:64:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:3E:DC:60:D4:C4:C6:27:54:39:D0:00:42:4F:A6:8F:0E:FA:95
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:3b:a9:35:b8:89:cc:ba:5b:92:aa:62:7d:d6:16:6c:1f:
54:cd:fb:1e:00:ef:d1:35:00:d0:32:f9:77:27:cf:ae:8e:d8:
79:59:37:f3:61:98:b2:30:2f:a5:93:60:e2:f9:ad:a5:a5:16:
f2:76:d6:44:86:8b:69:cc:01:9c:c8:a0:06:d9:ee:31:5b:64:
d6:a3:96:1b:4f:42:25:12:85:8a:45:12:d6:8b:89:3c:a6:0e:
0d:a4:e8:da:8d:c2:e6:7c:c7:c4:f7:a2:5e:12:46:9a:67:7f:
67:45:67:52:4c:14:79:8b:7f:9f:63:bb:db:db:1a:d2:be:3c:
c9:54:7c:3d:4d:1b:68:c1:53:99:49:1e:8f:b0:cc:7b:e8:9f:
c2:1b:75:32:ac:de:9c:8d:d4:d9:e6:a1:31:26:7c:0f:6c:3b:
a9:0c:b9:93:58:0e:fd:55:74:99:83:79:c3:7e:ee:64:d0:d7:
ed:f9:db:d2:99:a5:f8:6f:32:20:f6:fa:b3:15:02:77:7a:d3:
8b:7f:4f:1f:7a:ce:29:76:58:87:33:93:ac:20:06:65:3b:77:
cf:21:41:dd:30:b0:45:b2:01:c7:3e:d0:24:fa:45:92:de:d4:
cf:6d:6c:2a:cc:54:11:d1:12:eb:65:25:bf:a3:7d:c5:2a:09:
8d:bc:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:47 2025 by rpki-client