Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: uPmji+XuRC2OfOfSfqEbm8Bf5cuq4HZoPQYwnbBRFw4=
Subject key identifier: CC:F4:9A:AC:6B:CE:BD:62:55:BB:A8:18:96:A7:CE:BF:A5:2E:1D:27
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 0198485348FA10611E963021E6AF457B3B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1385
Signing time: Sat 26 Jul 2025 20:01:14 +0000
Manifest this update: Sat 26 Jul 2025 20:01:14 +0000
Manifest next update: Sun 27 Jul 2025 20:01:14 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: XyU+LlDGOQvryR0QKKsAAJfZkDcRQNKvL11u8102kl4=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:48:fa:10:61:1e:96:30:21:e6:af:45:7b:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jul 26 20:01:14 2025 GMT
Not After : Jul 27 20:01:14 2025 GMT
Subject: CN=ccf49aac6bcebd6255bba81896a7cebfa52e1d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:a5:c4:70:ac:49:6b:35:49:3e:d5:56:4e:
6e:a2:0e:e2:eb:db:08:3c:b9:66:f4:7f:69:e2:fa:
2e:29:ae:04:3f:0e:66:2f:c7:08:98:7d:e2:0d:6d:
81:c6:6d:06:b8:bc:26:bd:c2:5d:51:b7:6f:4b:94:
31:18:cc:9c:33:40:19:c4:5d:a6:49:51:5a:7a:4e:
ff:2b:3b:22:c3:a9:1a:f3:e3:1c:10:a8:2b:0f:41:
a4:c4:4b:a5:31:18:55:5e:2b:e5:0a:42:13:8a:02:
58:f8:a5:5b:83:bb:ba:99:13:16:b7:e4:53:ff:c4:
3e:26:d4:48:1a:71:b7:0e:aa:85:83:ce:10:ca:3c:
7e:36:3c:83:c0:04:5a:2d:5e:5d:cc:42:0b:2a:f8:
1b:3e:99:8d:c2:ad:8f:84:db:7d:d5:9a:6c:0e:1a:
55:f9:89:aa:cf:43:0d:a3:80:a2:2a:9d:0b:30:aa:
e8:50:32:71:2c:4f:60:cf:13:83:db:ce:3f:11:d0:
91:d1:41:4a:1b:11:7b:b3:42:07:22:69:0e:d9:44:
5c:9c:c9:c0:2d:c4:2d:f8:6e:0e:c7:bb:b6:04:a6:
0d:65:76:87:6d:2c:16:6a:2a:0c:69:25:11:e6:0d:
d5:0b:6d:0e:d7:25:ed:0b:b9:61:ff:c0:22:30:10:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:9A:AC:6B:CE:BD:62:55:BB:A8:18:96:A7:CE:BF:A5:2E:1D:27
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:65:5e:b2:12:4b:3f:29:2d:ba:3e:43:fd:b5:78:7e:a8:
a5:93:c4:a7:31:da:33:d3:75:25:91:40:52:81:ba:ce:90:d5:
6a:12:f9:d2:7a:e6:72:a3:c8:81:b6:b5:27:91:26:64:97:be:
d0:a1:83:7c:4b:6f:53:e5:5b:49:8f:57:87:27:f7:62:6d:9f:
ad:dd:89:b1:36:c1:f4:41:c0:1c:27:d1:e5:20:ac:14:f8:a5:
af:d8:97:c3:2b:88:8d:4d:e8:4a:32:c9:41:08:b5:50:84:84:
58:6e:e8:04:8e:6a:41:97:2e:1a:26:6c:41:90:b1:7d:7e:df:
17:5f:ef:59:5a:5b:b7:d1:7d:5f:87:5c:ce:d1:0c:cf:26:69:
9b:ee:44:cb:df:6b:ae:64:fd:66:33:62:bf:f5:bf:4b:46:78:
32:a6:dc:cc:8e:43:2b:d1:8e:bc:69:9c:b7:16:bc:c6:50:65:
c8:af:8b:82:91:68:07:6d:ad:8c:1f:28:9b:ee:be:ab:3d:b4:
c2:00:33:0c:04:80:aa:f7:94:f3:be:60:1b:3d:e2:ac:10:66:
d4:35:e2:5b:d9:47:e8:79:bc:57:89:50:62:4f:b1:82:d2:d2:
5a:dd:d5:ad:c3:8d:4f:8c:3a:ff:5f:19:24:34:23:77:b5:ab:
ad:0c:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:41 2025 by rpki-client