Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: WbUIh6Q3QL5XcHKeT1yayLg+rGSp2s5GJ+20MINA9Rs=
Subject key identifier: E7:3D:FF:8E:61:BE:59:FD:62:38:65:B6:8E:FE:59:B7:79:3E:23:6B
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 0198A04D97694794A2BC3FCB373137F7FBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0ECA
Signing time: Tue 12 Aug 2025 22:01:36 +0000
Manifest this update: Tue 12 Aug 2025 22:01:36 +0000
Manifest next update: Wed 13 Aug 2025 22:01:36 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: aNjqlu3cxajLerGoo92lVlh6BM6qyYyXcSlhSTWXNj4=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:97:69:47:94:a2:bc:3f:cb:37:31:37:f7:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Aug 12 22:01:36 2025 GMT
Not After : Aug 13 22:01:36 2025 GMT
Subject: CN=e73dff8e61be59fd623865b68efe59b7793e236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:66:22:ab:27:f1:77:f3:37:bc:23:00:8b:
12:a6:e2:4d:ea:3b:68:9f:73:9b:26:cc:65:76:ef:
41:81:4a:66:0f:e0:4c:44:c8:20:f2:de:99:34:6e:
78:34:0a:9e:92:bc:4f:df:e1:84:16:df:ad:eb:97:
b4:fe:dc:a9:6e:09:1b:b8:34:4d:1a:65:53:47:4f:
05:fd:3c:29:10:47:8a:8c:32:67:cd:f8:12:66:92:
38:d7:66:ba:49:bb:2b:40:5f:ad:29:43:e2:fe:cf:
a1:5c:54:e1:77:97:64:ef:f2:e0:be:fd:51:b5:bd:
5e:ed:22:e4:35:c9:24:5f:90:99:3c:a5:5d:41:e5:
1c:d6:7b:6f:9e:74:e7:6b:56:75:31:a9:46:d0:61:
56:9c:fc:96:b4:fe:c6:06:fd:7e:a4:57:a6:c5:c2:
76:54:22:1c:f8:1d:7a:e4:b6:1d:1a:10:2b:74:f7:
9e:da:fc:e2:5f:3b:04:d4:3c:8e:2a:f1:e7:3d:da:
eb:26:5b:70:bf:bd:74:aa:a4:2f:df:f7:b3:cf:ed:
23:a5:5c:16:46:c7:c5:81:7e:2a:be:b0:a9:d2:3e:
ce:8b:b6:61:6f:bf:21:2c:68:1c:6d:32:e2:17:82:
e1:9b:ab:58:09:09:64:c5:b0:02:f9:38:7a:eb:49:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:FF:8E:61:BE:59:FD:62:38:65:B6:8E:FE:59:B7:79:3E:23:6B
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:07:2c:c9:70:fa:99:d8:7c:97:36:8d:ce:a5:9b:24:d9:a6:
7c:e8:a6:3e:a1:62:0f:61:c8:d6:6c:6b:37:b3:0f:32:b5:6e:
b6:33:67:48:21:0b:9d:6d:49:6f:68:fa:a7:20:8c:be:2e:d9:
63:4c:60:dc:4e:46:9a:4d:29:6f:31:66:c8:5e:9d:a1:36:a8:
c1:02:c4:46:dd:f9:9f:30:24:c1:1c:64:12:c2:59:06:68:c3:
b9:7c:54:32:68:09:27:e6:5f:19:ba:0a:7e:60:8a:1d:c5:55:
d1:af:d8:b1:c8:ec:51:a4:70:2e:9f:18:26:af:df:f4:15:92:
17:7f:97:90:66:23:c2:fa:af:12:fb:6a:97:98:ef:8e:d6:19:
62:b2:2e:c1:7c:0b:40:ea:d5:16:94:2f:b1:0a:42:1f:0a:f6:
b1:1f:37:3e:b7:ec:54:19:8b:cb:51:d0:5b:4f:d2:c2:0b:d3:
ee:0b:2a:52:ee:32:23:e6:8a:97:76:0b:f0:12:7e:1a:34:e7:
22:35:fd:1d:24:ef:07:54:f5:d8:a4:7e:3d:26:71:a4:96:54:
df:ed:93:0b:4e:2c:2f:23:18:e8:b0:ce:46:57:29:7c:60:7c:
95:5d:0b:42:1b:01:01:56:85:73:31:6b:cb:54:b0:05:28:cb:
17:f7:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:40 2025 by rpki-client