Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: L2Q+7wmNOM8LGMmxVv/Mgp7eL+krFENUK8Da6s/Lpd0=
Subject key identifier: E3:A3:BB:70:55:FA:DD:03:F2:17:53:33:CC:BE:64:95:6C:A3:94:C2
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 0198481B6D789DDE1885DFA7A542CD510B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 0B
Signing time: Sat 26 Jul 2025 19:00:13 +0000
Manifest this update: Sat 26 Jul 2025 19:00:13 +0000
Manifest next update: Sun 27 Jul 2025 19:00:13 +0000
Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=)
2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: x5Vk4QxXBqPE5cSgNbzhaeWdvnfga/Z2YZqk1ZA9plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:6d:78:9d:de:18:85:df:a7:a5:42:cd:51:0b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Jul 26 19:00:13 2025 GMT
Not After : Jul 27 19:00:13 2025 GMT
Subject: CN=e3a3bb7055fadd03f2175333ccbe64956ca394c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:2c:9e:9e:5a:a9:ea:72:03:13:51:f7:4e:
36:8a:b7:10:49:31:fa:c4:69:42:f2:47:c7:80:1a:
b1:b3:51:a9:79:69:de:c3:4b:40:4f:5a:a5:43:c0:
4d:92:f4:fa:9e:72:c1:b6:2e:b5:e0:d2:2e:cd:ae:
c0:8c:36:1b:db:56:7f:62:46:1d:b0:68:89:ad:c4:
f1:fa:bb:e6:e7:46:8b:b4:b2:15:30:8d:62:8c:73:
28:1d:08:21:82:45:3c:fb:0e:38:2e:1a:f8:5c:67:
1d:b2:b7:ac:07:4d:5c:d2:5b:fc:ef:c2:e3:b2:6e:
fe:40:27:2d:80:d9:72:b2:1a:1c:02:21:51:0f:21:
7c:b3:8f:03:37:65:6f:3d:a0:2d:d5:92:ec:53:05:
ac:98:b0:0f:75:11:19:9e:03:46:0b:41:0a:4a:47:
b7:b4:84:03:42:51:84:e8:ff:80:7e:d7:fe:fc:6b:
b0:c3:4d:9e:e1:b1:23:a8:0a:14:10:d5:b8:d0:e0:
f4:9b:66:09:6a:8e:4f:d6:fb:8b:fe:c3:3e:37:bc:
0b:d6:3a:2e:10:e6:99:12:75:19:e5:a9:97:9c:29:
6b:f1:06:60:7a:19:e9:89:94:5b:42:71:6c:5a:cc:
7a:4d:93:fa:01:f0:b4:fa:95:94:35:bd:55:23:6c:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:BB:70:55:FA:DD:03:F2:17:53:33:CC:BE:64:95:6C:A3:94:C2
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:d9:a0:ff:34:25:07:40:23:ae:b9:68:0e:2d:b3:d7:98:
72:a0:05:42:ad:b6:bd:51:f8:64:97:75:0c:b9:02:37:72:ff:
44:b3:4f:1a:8c:29:a3:4d:8c:2f:d6:3f:16:e3:7b:86:46:d2:
47:30:d0:48:cb:e6:97:52:a1:87:d5:c8:dc:0d:e1:bc:58:ed:
1e:63:7e:58:6a:69:1d:d8:be:4a:de:8f:d1:78:c9:08:00:1f:
4d:5d:6e:6b:4b:bf:51:1d:31:be:0a:85:f2:d4:bd:f6:d4:2e:
64:c5:d8:64:cb:33:e9:fb:20:46:64:e8:c4:fa:0f:82:8c:8e:
49:28:e3:e3:de:1e:34:4b:83:95:c8:ba:e2:80:2f:d4:ac:d8:
28:d2:c6:1f:06:4b:69:3e:f7:2e:7d:50:43:92:72:29:cb:9f:
56:41:66:1e:2f:a2:43:f1:73:64:19:e3:5f:11:4b:e4:58:36:
70:f8:bd:f0:39:0f:01:0d:fd:6d:e8:fa:c7:e2:ec:ae:64:0d:
2d:59:57:43:29:ef:24:ad:43:ec:57:a1:bd:e5:08:51:40:7f:
07:61:60:cf:46:7c:fd:70:bb:2c:98:dd:25:24:67:73:04:e3:
4e:2f:a3:19:d2:1f:1e:37:2f:a0:46:d3:8b:e2:df:2d:35:03:
33:b6:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:51 2025 by rpki-client