Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: u7N0B8phnJuSefs/fIq4GO5AXAMFbELKmfVQ0ab7/Hk=
Subject key identifier: 30:93:1A:EB:19:ED:74:97:D4:26:06:E7:44:EA:33:CD:F9:6C:2A:05
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 01989FA87E41B2A31E5079EB56AD51120BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0C85
Signing time: Tue 12 Aug 2025 19:01:16 +0000
Manifest this update: Tue 12 Aug 2025 19:01:16 +0000
Manifest next update: Wed 13 Aug 2025 19:01:16 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: os5DF1E48aI1xG7K1YeYsVzXrx3QcfdMk967w6QEvRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:7e:41:b2:a3:1e:50:79:eb:56:ad:51:12:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Aug 12 19:01:16 2025 GMT
Not After : Aug 13 19:01:16 2025 GMT
Subject: CN=30931aeb19ed7497d42606e744ea33cdf96c2a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:a9:2a:07:0a:7c:74:a6:2b:a0:14:11:e7:
ea:aa:cc:2b:b7:0f:12:c6:23:36:5e:3f:dc:e1:15:
ce:87:2f:c6:68:0d:63:70:15:06:ff:10:3a:9a:9a:
ee:32:d1:bf:fa:e0:76:4c:e6:03:7d:fe:37:9f:4d:
10:49:74:e5:eb:aa:0b:6d:4d:99:0d:c9:46:b2:73:
89:57:a6:ba:eb:43:1f:a7:29:53:84:8f:06:bb:d8:
f5:69:81:be:ed:9e:6b:89:d8:9f:04:ac:6f:be:c7:
89:97:7c:b8:7b:83:21:16:2c:13:0b:ae:12:df:6d:
17:7c:96:06:c8:c7:dc:25:43:d8:e4:83:bb:0c:17:
c0:19:7d:25:6d:78:1d:46:43:30:6b:da:fc:2b:89:
51:84:4f:88:08:12:21:bf:94:74:4c:11:4d:4f:37:
85:fe:e9:01:ec:a3:c8:e2:3f:23:d2:f9:0d:b2:87:
52:4a:85:b1:42:20:44:b0:dc:ce:cb:b5:46:2b:1d:
4c:a8:22:f0:1d:f6:34:9d:26:f1:39:8c:b5:15:3b:
aa:7b:ef:c7:c1:4e:79:cc:eb:49:69:2a:84:97:83:
34:ce:6d:ae:47:ff:33:32:85:42:1c:c4:e5:f2:9c:
7b:ba:47:c4:8b:8a:b0:0d:03:ce:94:f1:37:41:b5:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:1A:EB:19:ED:74:97:D4:26:06:E7:44:EA:33:CD:F9:6C:2A:05
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:ba:2f:22:91:95:63:82:b8:c5:eb:52:33:dd:7a:00:a1:
8d:51:38:47:de:4d:fb:2b:d3:3b:01:23:73:7a:c5:2a:dc:86:
7e:e1:02:a6:5c:c0:24:46:43:38:cc:03:22:96:a6:d4:65:1e:
bb:2a:9e:7d:92:f0:d8:a5:f1:0e:15:79:a7:8f:88:aa:4a:42:
fe:fd:a5:92:b9:56:c9:3d:19:31:89:01:72:eb:41:8e:73:e1:
6f:02:65:18:e5:b5:3d:5d:92:af:b0:98:c5:86:06:65:64:cd:
f2:29:ba:5e:d4:45:51:59:3a:66:70:d7:6d:a5:03:07:7a:92:
14:5f:c3:7e:3f:c6:ec:18:18:65:5c:7b:ea:ed:b4:d0:2f:04:
68:b4:2b:6e:fa:3b:72:a8:d2:d7:2e:08:a8:b2:02:d6:61:33:
27:42:5e:72:77:b5:8d:7e:db:d8:13:10:b1:c7:10:e4:c4:c1:
d5:38:db:18:52:1b:06:e6:81:37:55:14:98:3c:81:da:bc:44:
6e:f2:56:3c:8c:a3:e0:15:ff:08:1d:46:84:49:d0:63:4a:6a:
dc:fe:d7:fb:59:1c:65:ca:48:62:05:46:7c:a0:e4:69:16:9b:
10:a1:13:99:f9:24:34:c2:03:19:2c:11:32:7d:ee:2c:f6:7a:
19:15:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:23:41 2025 by rpki-client