Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: BXSBKyeBAErN1sHgCNWzBN+myg0xl7g7dAFTX/A6AHQ=
Subject key identifier: 01:E4:96:9F:2A:B5:2C:6A:6C:91:0C:89:28:03:92:45:DF:AE:5C:0A
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019847775F8D02F9D09432F7FF664862EF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 108B
Signing time: Sat 26 Jul 2025 16:01:02 +0000
Manifest this update: Sat 26 Jul 2025 16:01:02 +0000
Manifest next update: Sun 27 Jul 2025 16:01:02 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: DK/OtK8fawit08HFqgecpGNiToGIsKHsCr9r6De6jO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:5f:8d:02:f9:d0:94:32:f7:ff:66:48:62:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jul 26 16:01:02 2025 GMT
Not After : Jul 27 16:01:02 2025 GMT
Subject: CN=01e4969f2ab52c6a6c910c8928039245dfae5c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:02:19:50:18:8a:71:fe:da:06:01:8e:c8:
0b:91:90:09:e5:39:1d:f0:c8:27:9e:3e:9f:3e:ce:
6c:74:ad:0f:f8:2b:d1:42:b2:bb:48:62:be:2e:70:
20:f2:55:c7:dd:9d:72:3f:31:e7:46:52:69:d5:dd:
06:94:44:24:fd:91:62:40:b6:15:d2:fa:0a:07:90:
e6:0f:e1:80:eb:b9:19:7d:32:ff:56:c3:9b:0c:18:
ee:12:4d:9b:de:09:73:0a:a9:32:f1:bb:cc:ac:0a:
b1:4e:b6:ca:c5:8c:5a:46:86:c3:6b:a3:99:c4:f0:
c8:75:d1:d5:6b:11:7c:35:d6:3e:b1:60:04:70:de:
5f:3c:aa:87:8f:b8:43:fa:e2:97:85:76:3e:c0:71:
58:84:c4:be:62:6b:fe:ca:09:29:27:05:18:f9:7b:
ff:6b:81:98:11:bb:35:46:cd:79:50:02:ed:78:51:
a0:48:bf:5b:43:de:01:62:70:87:76:ad:d4:3e:6a:
0a:db:16:cc:8c:78:78:f6:53:29:7a:fa:80:e0:ea:
48:1d:b3:c3:0a:26:e4:33:57:1c:8f:17:24:23:93:
78:7e:5e:d1:61:9d:1d:bd:02:5a:ba:2e:e7:30:01:
db:3d:e6:a3:e2:4b:1b:86:a5:ad:25:80:9c:2b:2d:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:96:9F:2A:B5:2C:6A:6C:91:0C:89:28:03:92:45:DF:AE:5C:0A
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1a:59:56:dd:6d:d6:64:0e:87:df:c5:e0:1d:d8:5e:79:08:
8b:dd:3b:5a:ae:ed:47:64:15:f5:fc:04:eb:7b:01:ea:83:1e:
59:5c:a0:7c:ed:3e:25:2d:54:0b:d9:4e:ad:5e:07:d4:8c:31:
12:94:20:c9:79:b3:8f:f6:c6:36:a0:41:71:df:f0:93:60:0e:
92:a6:cd:62:04:29:93:cf:70:d3:96:b4:e7:75:d6:2f:c0:d1:
00:3f:8f:cf:6c:ee:d0:7e:a1:0d:74:a3:70:4a:45:a1:80:96:
36:bf:3d:cd:ae:68:63:f5:f4:7b:bd:94:1b:24:ec:ee:86:96:
93:e1:ba:4f:bf:fc:a4:e4:54:ee:f9:7c:3b:bc:f2:dc:b7:b2:
ac:8a:40:48:3e:65:21:bb:a6:66:28:6a:d5:18:87:74:af:8c:
3e:ff:cc:93:93:db:ed:3e:c5:a8:c1:61:89:8b:4c:52:2d:cd:
5c:de:5b:9f:ff:aa:96:6b:6c:6b:c2:1e:c9:1e:8e:7b:4d:d5:
e1:ce:96:6f:83:2d:f8:32:59:19:53:02:8d:08:ac:3c:64:ee:
27:80:2b:d1:4e:81:cc:b7:20:48:ee:d6:42:67:1a:df:a2:a4:
ee:a1:a1:86:1d:bd:9e:54:d2:fd:8b:23:c4:d7:e1:31:61:67:
71:2e:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:51:18 2025 by rpki-client