Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: PUjEiEo80ImY5OVjkqkHb+69BNd2cwCzdz14peed8bY=
Subject key identifier: 29:68:54:8E:D1:EB:AC:E6:92:C7:28:A6:08:FB:D4:BD:08:B3:59:09
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 01984A0A39F4191781CB4987A971F319741D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0652
Signing time: Sun 27 Jul 2025 04:00:40 +0000
Manifest this update: Sun 27 Jul 2025 04:00:40 +0000
Manifest next update: Mon 28 Jul 2025 04:00:40 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: xMdNJKmtNCFsTynwAO4lBOcuemcLUUz2sD6mo1mJQ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:39:f4:19:17:81:cb:49:87:a9:71:f3:19:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jul 27 04:00:40 2025 GMT
Not After : Jul 28 04:00:40 2025 GMT
Subject: CN=2968548ed1ebace692c728a608fbd4bd08b35909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:fc:6f:ec:eb:8f:07:92:de:e2:99:a5:5d:
ec:45:fc:41:b8:c1:35:fe:a2:cd:0c:17:0c:58:4a:
ff:78:e5:c9:a7:b6:ef:2e:24:bf:eb:c1:26:5f:de:
2e:af:e4:1d:36:c3:30:e3:e6:af:0c:c6:bb:42:0b:
71:ba:2c:b9:9d:9d:ae:7e:80:d4:c6:7c:a8:fe:49:
b5:81:57:5e:95:32:27:83:4e:0b:eb:93:ed:d7:65:
74:0e:23:85:43:d5:c6:36:a6:36:9a:d1:db:4b:b3:
04:0a:75:23:32:79:2f:07:f3:5e:32:38:3c:3c:dc:
73:9a:2d:92:e6:f0:57:d0:e3:0c:66:ef:f2:1e:84:
c5:6e:40:a7:96:94:02:00:76:e2:6e:bc:26:70:11:
9e:bf:6a:4f:97:7a:a9:96:44:32:6e:98:6f:88:28:
c2:93:f7:c8:14:c7:4d:e3:48:d5:f8:ac:e1:16:65:
35:a0:68:b4:02:33:45:8f:bc:ca:c8:de:0a:fd:a0:
a5:37:20:26:48:3a:cb:b0:2c:b6:b4:ad:0d:9c:5d:
f5:5c:af:34:d2:a2:f9:dd:bd:44:f2:28:31:60:25:
cb:85:de:c8:f2:27:ad:87:51:2c:4c:93:25:95:a3:
f9:a4:03:22:44:56:0f:5d:0c:19:54:dc:1b:ee:49:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:54:8E:D1:EB:AC:E6:92:C7:28:A6:08:FB:D4:BD:08:B3:59:09
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:be:58:cc:b4:85:90:91:31:a2:ec:4a:d8:56:01:56:40:
c4:17:99:81:bb:c9:78:06:01:88:d5:e3:30:88:2c:6f:69:9d:
b1:33:b8:a5:72:8c:28:14:68:ac:03:5d:de:e1:08:d8:8e:00:
fe:a8:ed:76:09:f2:e8:40:bf:0d:58:93:09:3a:14:98:45:a8:
58:2b:38:50:67:44:b0:d2:55:51:ea:5e:86:b1:5a:87:cd:7b:
b2:f2:18:8c:7d:89:28:fb:84:9c:91:b0:29:7f:39:b9:1a:45:
4a:ea:ab:94:84:fe:23:16:c7:cf:9d:60:a6:8e:cc:74:4f:41:
b8:3a:99:46:dd:5e:f6:5b:39:41:66:f4:17:23:f5:a3:90:8c:
fe:14:5f:bc:34:c8:05:48:60:19:88:61:fe:ef:4c:7d:d7:97:
47:4e:c3:a5:53:08:94:e9:75:9f:a9:15:b0:52:68:dc:a5:dc:
d1:9f:7e:65:d4:e3:49:35:3e:84:8a:74:64:60:40:a4:ea:a5:
11:bd:84:38:31:27:7e:6a:98:8d:a8:a1:b1:2b:03:99:9c:c2:
d9:d7:2c:26:7f:ef:91:67:be:16:21:63:29:2a:c1:06:70:ae:
b3:a8:5c:1b:f4:fb:52:cf:ca:d0:f1:73:e8:e9:cc:58:33:9c:
81:9b:00:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:07 2025 by rpki-client