Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: Me76+1B2UzUHtkWeSNSOcpwOyGCAQgbTZZFSyLxVYp0=
Subject key identifier: BC:ED:EB:A4:CD:21:6D:F2:91:99:6C:2C:15:44:8E:FA:D7:D3:35:5B
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01987DF89465621996D8F229E23B17A2BC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 06:01:39 +0000
Manifest this update: Wed 06 Aug 2025 06:01:39 +0000
Manifest next update: Thu 07 Aug 2025 06:01:39 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: eGuuIFDdByltQzZvrUKzgmBdL1UHOy8R6vRz88OZFzs=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:94:65:62:19:96:d8:f2:29:e2:3b:17:a2:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Aug 6 06:01:39 2025 GMT
Not After : Aug 7 06:01:39 2025 GMT
Subject: CN=bcedeba4cd216df291996c2c15448efad7d3355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:35:db:0f:00:19:9e:00:98:81:be:1d:2f:
59:5d:81:7e:5d:5f:fa:9a:23:a3:ec:b1:2a:93:a5:
2d:f5:58:cf:93:8f:a2:85:77:76:d2:2a:ba:1d:d1:
07:98:50:a4:2f:6f:76:4f:f8:0d:68:d5:f7:27:fd:
b3:ac:41:a6:fd:b8:8e:c0:55:26:f0:a1:96:a6:b9:
97:87:46:e6:b9:f4:2b:70:2c:21:c9:f0:1f:8b:6a:
79:d6:01:d0:20:1b:c0:d0:42:4e:7a:07:22:6b:b8:
73:57:5e:89:a9:f5:5a:f4:64:14:3f:91:81:af:f8:
d9:49:d1:7e:df:34:d1:9a:79:a6:3f:23:f1:a6:e1:
b6:60:7f:0a:cf:45:e9:69:7d:a6:c4:e3:2a:44:5e:
65:56:5b:58:9c:f8:7e:5b:96:ca:b0:0e:03:0e:d6:
44:8a:da:5f:9f:04:ac:70:b3:ff:a5:7d:9d:49:81:
64:63:45:44:52:f7:cf:98:78:f7:c8:de:22:3b:5e:
36:9b:ca:81:ec:23:34:6a:5a:22:f4:a4:4f:28:67:
25:b0:bf:c3:73:71:c6:a7:0a:8a:7d:00:10:ec:5f:
ea:b1:14:ee:53:73:59:4e:61:0d:a5:da:59:c4:9a:
24:ab:5a:76:e1:9c:7b:80:25:4d:88:d0:b6:c3:b9:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:EB:A4:CD:21:6D:F2:91:99:6C:2C:15:44:8E:FA:D7:D3:35:5B
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:90:c2:e6:2f:96:cd:4c:eb:5e:58:b6:a0:70:35:40:46:5d:
5f:c6:b3:ef:64:de:05:99:47:69:20:09:98:1e:0c:76:33:8c:
45:87:ca:bd:f9:ec:e4:a7:47:13:ae:d3:35:f1:3c:53:1b:43:
7c:b0:03:32:12:1b:08:4a:31:bc:44:c8:fc:83:53:c8:d3:6b:
17:b5:61:a0:69:48:a0:be:f8:c5:8d:4d:eb:cc:36:ef:24:5b:
aa:47:0a:7f:87:55:d5:3b:e2:54:b7:31:60:03:97:88:7f:44:
6e:c2:f4:76:27:23:a3:3f:52:9d:47:db:23:7c:54:d3:6a:24:
92:00:df:d6:66:5c:a9:84:3d:66:38:9c:02:67:98:3a:b4:ca:
ce:ab:be:97:d2:73:38:b9:48:d7:b9:6b:23:2c:64:96:b9:0a:
8b:44:84:6f:8e:ac:ad:46:ca:75:3d:10:15:a1:df:9d:fe:76:
6c:72:f7:f5:bb:0a:3c:5f:6c:60:2b:89:74:3b:04:26:eb:11:
8c:af:1d:28:f2:56:af:fe:b3:a3:76:91:c9:42:72:7d:a2:fc:
a0:e3:03:ef:aa:5d:9d:ea:84:44:36:0c:6f:66:61:3e:47:9f:
f6:64:12:d9:ce:7e:43:81:7b:29:fa:86:87:03:43:bd:25:72:
c0:86:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:18 2025 by rpki-client