Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File: KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier: QMq10aPwikQgaDjELfgKChwQV/2U1ltF98GBBtka+aE=
Subject key identifier: 80:37:72:3C:4A:1F:7A:13:7B:1B:F7:B7:3C:9D:60:A2:3D:3D:3D:B5
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 019845BF3716D2F767BF30A9ACA54E8E6761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number: 03AA
Signing time: Sat 26 Jul 2025 08:00:15 +0000
Manifest this update: Sat 26 Jul 2025 08:00:15 +0000
Manifest next update: Sun 27 Jul 2025 08:00:15 +0000
Files and hashes: 1: 4Onxw3ZyCceGdWFdrDz9GypV1To.roa (hash: rLXGfCwokEmOeP6DWTGHar2KAFcpyGY37FcoMJ/rm24=)
2: 6w2llJPr5u5R0U0gFJBhkfjASt8.roa (hash: Et1DM1KW1gT7dKyxGFfIxs38O3+sH74ZansUhbBdzew=)
3: HxZyQaGrGtOk8RKg0Mhbl06w1Co.roa (hash: T6PK192RHox/GMNjjl8t8FiOFdhRf0h3waZVXZOPKpk=)
4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: lUN3haXDZkshdSGmuWcDgE8OGQMwzflvjuznhsan5qg=)
5: PwMQ2FB61zxu5sQ2E09luTqKMvk.roa (hash: izn212mH5oYV5cpl26pTxpZxIsUMzoPkaD7C7yvNm8E=)
6: fNae6M71mV294ZXPAPike0PbceE.roa (hash: yK1vBYE3EmPb37wOJedAwxWWRQFUDScm3ZCALz4wEUs=)
7: nFiPEMhy3ZN7Kzd1c5drtsfC2Ms.roa (hash: K/fi1bP7PVVo/L+gbRw+2aDpJIZXZHh+7f96KzgbyVo=)
8: od9af71GeQfA9Hxa-pUi9HfyQbQ.roa (hash: XWeJ2o3YIDMGq+Gf7bx+E7FN5efcdXQkm09+SRPSSXw=)
9: ypFL40Xoi4y05qu3ogA3n6gvBmc.roa (hash: Osn8j8oSksWpQIeEIhv5U30zU1XAWvsewtWKW4S5v1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:37:16:d2:f7:67:bf:30:a9:ac:a5:4e:8e:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jul 26 08:00:15 2025 GMT
Not After : Jul 27 08:00:15 2025 GMT
Subject: CN=8037723c4a1f7a137b1bf7b73c9d60a23d3d3db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:ab:ed:a3:db:b4:99:1e:fa:db:43:c1:3d:
29:55:04:01:e6:73:a9:e8:99:8c:b9:17:ce:72:05:
ca:49:6b:cc:eb:af:9f:fc:a0:a8:41:f6:b7:79:04:
48:b2:aa:88:fd:75:59:75:13:d3:ab:5a:41:a3:a0:
7a:8e:a9:70:90:1f:fe:58:e8:be:3b:f2:59:fd:d1:
a7:45:2f:d5:e8:20:37:e2:f6:be:73:da:53:a2:cc:
6c:8b:7b:79:fb:58:d5:df:87:1d:5d:94:d9:a3:29:
8c:ec:e9:0f:20:08:1a:f3:39:e3:23:00:99:85:7f:
67:86:dc:bf:7b:ae:1a:ed:19:e6:95:66:fd:14:99:
b2:f5:ef:39:e8:fe:19:9f:3f:36:9d:36:a5:2e:38:
66:8b:41:d6:6f:27:dd:a7:95:93:0a:52:52:31:3e:
1a:13:2d:14:ae:2e:47:97:d8:1a:9f:f7:b8:ab:89:
ac:20:7b:d5:29:1c:33:94:1c:fb:27:a7:6b:a5:1e:
e6:41:73:1d:34:54:52:1b:5d:2c:c5:56:71:35:1f:
b7:06:6b:bf:61:2b:61:d7:b1:fd:b1:81:86:6b:8b:
f0:81:9e:55:9e:74:48:8a:e6:8f:48:b0:35:bc:1b:
f4:bb:90:2d:4b:c8:6d:ee:ba:d7:2e:cd:2c:9b:be:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:72:3C:4A:1F:7A:13:7B:1B:F7:B7:3C:9D:60:A2:3D:3D:3D:B5
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9e:08:4a:90:e6:c9:e3:9e:d2:3b:c5:4d:12:13:bc:46:dd:
77:74:0d:ff:26:6e:13:c6:2c:4c:90:e3:6a:f5:39:ce:b7:46:
5b:88:62:83:1f:76:cd:bb:35:5a:85:dd:31:79:10:f0:b1:09:
ca:95:20:f2:12:4c:27:54:bb:48:4e:3c:e0:b5:ff:43:92:90:
47:67:e9:42:bb:ff:f8:ce:fa:f5:5d:70:6f:0a:bd:d2:6f:0e:
44:69:4a:b5:ba:0c:79:24:14:2d:c7:2e:33:e8:ab:6b:86:17:
81:21:ce:71:4c:16:16:ef:13:6a:c7:03:bb:93:44:78:21:b6:
f3:c6:38:78:4d:53:77:dd:32:9b:8f:9c:a4:c9:a2:e0:81:78:
8b:6d:48:7b:d9:9f:a9:28:27:bc:cd:73:c9:1c:3f:c1:f3:d5:
63:53:0f:43:b5:39:54:88:e1:bc:96:a8:25:43:42:09:e6:f2:
ed:66:14:dc:32:d2:4b:4f:a4:21:32:a5:3a:85:7e:64:78:db:
20:49:b2:fc:0c:c2:a9:c0:61:88:3d:51:8e:6e:3b:77:8f:42:
fd:b9:a9:3b:61:a6:63:11:45:4f:c8:ec:64:a0:62:5f:5e:1a:
83:3c:90:25:17:03:90:90:38:62:a7:72:7c:78:47:93:75:35:
db:6c:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:46 2025 by rpki-client