
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: 0sNfRQ1cDDnlu3aKeHNlxyGPD6/vw4W6va4C4dZJ/7M=
Subject key identifier: 60:7B:AE:23:00:7B:C9:9D:30:F8:41:28:7B:EF:F4:27:E6:1A:97:B2
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019874195D1336920329C6DDF0421FF9F582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0F06
Signing time: Mon 04 Aug 2025 08:01:15 +0000
Manifest this update: Mon 04 Aug 2025 08:01:15 +0000
Manifest next update: Tue 05 Aug 2025 08:01:15 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: e2FfwVy67+tstLTJr+QRhNPVi9tk/HQZZB4e1AO9syo=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:5d:13:36:92:03:29:c6:dd:f0:42:1f:f9:f5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 4 08:01:15 2025 GMT
Not After : Aug 5 08:01:15 2025 GMT
Subject: CN=607bae23007bc99d30f841287beff427e61a97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:de:ab:e2:0b:c3:87:a0:f1:89:1b:44:b7:
74:0c:f6:7f:44:42:92:21:c6:9f:65:3c:b0:7a:d7:
5e:c9:46:b6:b6:2c:2b:66:25:1c:16:db:cd:37:0a:
72:8a:6c:90:fc:d6:9c:07:d7:bd:3f:2b:08:73:a3:
a3:28:cf:f5:e3:a4:d4:d0:23:79:0d:5b:e8:cd:27:
7f:1c:d1:3a:81:dc:fb:02:af:b2:18:b8:f5:a5:bf:
d2:a6:46:bd:8b:f3:b3:01:f6:11:70:88:ba:70:33:
1f:6a:92:30:8c:45:c0:69:91:a3:0e:41:68:57:7f:
55:70:f2:cf:bd:40:cd:13:39:51:db:20:3a:e0:ec:
eb:bd:30:4d:2d:60:da:93:cd:a1:09:3c:e0:86:05:
0c:a9:57:80:ce:f9:c0:bb:b7:55:29:f1:64:05:14:
80:81:12:20:be:f3:4c:5c:18:12:d0:9e:02:25:4e:
3c:e8:a2:50:4d:ce:b6:20:19:09:94:d8:c6:fe:a5:
d0:a4:e8:23:a1:00:d6:79:69:47:b7:05:e6:2e:e6:
b0:e6:bf:25:fd:12:5d:72:bd:e8:8b:3d:9a:8a:8d:
9d:1b:89:77:ce:a4:a1:45:10:1b:41:01:07:e2:20:
15:9b:ea:a3:be:14:9d:85:36:17:c3:6a:e4:54:bf:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:AE:23:00:7B:C9:9D:30:F8:41:28:7B:EF:F4:27:E6:1A:97:B2
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:c8:69:ce:1f:98:6b:4b:a3:b4:53:24:0c:f3:18:78:73:
aa:8f:39:fa:9f:eb:97:13:79:83:1d:d9:34:63:6b:1b:c3:20:
47:19:54:2b:e6:6f:2b:11:35:27:5e:9c:42:17:ef:ca:2d:d4:
91:37:af:b5:d3:df:3c:e2:7a:0d:cd:18:bd:80:26:db:7b:e0:
d9:b8:5a:52:75:bc:80:ff:29:5b:de:93:a8:94:a3:1e:c7:f8:
df:8c:3f:65:d1:d2:3f:68:f2:72:92:7d:06:76:4d:9c:b5:be:
6c:25:0f:58:17:e8:c6:9d:19:7d:ff:7d:53:90:ae:9d:0f:42:
29:65:30:4c:1e:03:26:31:d2:ec:ca:44:06:ce:f6:c2:4b:1e:
72:e0:1f:d9:8b:5b:2e:16:a7:ec:1b:f7:58:dd:da:ad:d0:00:
d8:34:9c:3f:69:56:e7:d8:98:7b:3f:e3:3e:54:5a:93:7f:58:
2c:06:21:37:c3:37:57:18:45:20:fb:9a:38:b2:0c:f8:14:88:
66:a4:0c:08:53:a3:25:2c:f9:27:da:3a:41:99:91:e7:e0:b1:
6e:89:8c:6a:a3:2e:ef:9f:1c:54:f8:2c:8d:35:b2:1d:ff:7c:
c6:a3:5d:0b:50:5b:51:26:13:b9:3c:e2:db:f4:21:dc:bf:27:
f9:50:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:27 2025 by rpki-client