Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: CWGYrpGsGx4AHvPuLHr4yC+W4/RjUF2xklCD0bV5+MA=
Subject key identifier: DE:6D:4D:53:EF:53:3C:2A:29:C7:D9:C3:C6:03:33:6B:EE:DD:95:A7
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01984A09CC70D50BF2AB8D105EA5A7F2A82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: lJZxosMY0PDIVaHgrLdAOJUXCti9NXPv8jIZkzz/ZhI=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cc:70:d5:0b:f2:ab:8d:10:5e:a5:a7:f2:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=de6d4d53ef533c2a29c7d9c3c603336beedd95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:7a:35:b3:fe:07:a9:5e:aa:fd:ce:d8:91:
0f:ce:f4:d9:0c:20:a6:9a:a7:ef:e0:f6:21:9d:7c:
21:cb:05:d5:94:a0:95:8f:e8:2f:24:78:42:2f:bc:
ec:3b:c5:ba:3a:be:8a:b9:af:52:3a:63:ab:f1:ba:
fc:4f:25:cf:f7:31:be:82:12:b7:84:e0:7f:8b:cf:
87:15:50:37:15:83:98:1e:26:68:f1:3d:ab:f0:b1:
fa:f0:67:3c:17:84:86:ac:0b:45:fb:94:fc:9f:56:
ae:24:f1:03:37:8a:18:7f:42:b3:1d:83:60:33:9d:
e3:39:1c:b8:32:89:6c:e0:07:2a:e2:c2:8e:f5:fe:
7d:b7:9c:0d:18:d2:92:59:24:81:3d:d3:a3:bd:12:
03:3c:4c:32:21:74:d3:7b:b3:d3:d6:e6:03:26:d7:
e5:44:bc:db:65:89:72:34:70:59:7b:28:1c:0a:b9:
53:ef:3d:9b:fc:70:b1:bc:a3:b2:45:ea:6e:82:ce:
d0:ff:41:36:16:0f:4b:7c:a6:63:45:d5:34:ce:61:
b5:b4:0f:59:9a:df:a7:81:4e:55:be:09:06:91:9e:
74:3d:9c:11:12:04:8a:fb:f2:f0:05:18:da:e3:a9:
61:67:a7:bc:ae:d2:95:ff:81:4c:d3:2f:7d:33:10:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:4D:53:EF:53:3C:2A:29:C7:D9:C3:C6:03:33:6B:EE:DD:95:A7
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:86:08:f6:4a:d8:61:0d:19:f3:f0:fb:28:b1:b3:c0:3d:16:
2c:e3:ee:78:40:41:7b:bd:a0:38:48:db:79:26:6e:76:6e:39:
c1:2f:a5:13:e6:84:87:97:97:38:d6:37:46:39:c0:1b:a7:84:
25:ce:7f:e6:d7:84:86:1a:a2:85:29:2f:ff:c9:a8:b0:8b:ce:
37:34:68:3a:58:b0:db:ca:b1:86:2c:a4:3f:46:ad:47:92:9b:
37:44:46:bf:63:14:cf:02:25:97:da:3f:69:d5:5a:c6:ad:91:
5f:e5:cd:7a:8a:4f:fe:4f:00:ab:5d:db:0f:4f:83:ae:5f:0f:
94:fe:57:c7:ab:d1:71:df:ca:f9:03:99:e9:dc:64:e9:8c:c6:
fc:2c:b1:14:63:6b:29:33:09:c6:de:0a:77:69:4a:45:77:7b:
c1:9f:44:09:47:04:be:fa:98:0b:48:d1:d5:ee:98:b4:06:9b:
05:cb:7b:b3:cf:a6:44:03:29:ec:e1:b1:ab:fe:c1:d7:80:b5:
5e:0c:9a:75:76:76:e6:ca:2a:01:94:8b:9e:b4:da:96:38:06:
32:dd:ec:0e:63:0d:e7:82:b9:e7:06:ca:d8:4b:28:5b:ec:6f:
0c:94:ed:10:90:5f:17:9b:a3:16:48:62:85:8f:6b:c4:b9:c2:
19:56:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:37 2025 by rpki-client