Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: x1k4nUKe5OZchEDzd9AgdgHIpn5kvX8IcORt60VeUlA=
Subject key identifier: CE:53:2E:0B:38:66:C7:62:A5:88:56:73:51:54:45:34:31:3C:F6:AD
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 019846D1DB9EECD741F037A8623188ACD68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 1335
Signing time: Sat 26 Jul 2025 13:00:15 +0000
Manifest this update: Sat 26 Jul 2025 13:00:15 +0000
Manifest next update: Sun 27 Jul 2025 13:00:15 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: /to2MsMAST9KyEpAA8bXVUxFkwEudV74QVqQlifoq/g=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:db:9e:ec:d7:41:f0:37:a8:62:31:88:ac:d6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Jul 26 13:00:15 2025 GMT
Not After : Jul 27 13:00:15 2025 GMT
Subject: CN=ce532e0b3866c762a588567351544534313cf6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:de:72:ee:46:c2:ca:3d:66:3f:cf:5e:1d:
a4:02:d6:c6:f4:1c:eb:35:76:9f:c7:2b:c0:f5:cf:
98:f0:fe:08:a6:fe:bc:58:9a:cd:f8:77:dd:e2:3c:
74:36:9b:13:85:e4:88:43:3a:12:aa:23:26:c4:0d:
19:25:21:75:7b:8c:d8:77:9a:0d:7f:61:97:88:ed:
82:2f:4e:0a:2d:ac:f2:d0:23:86:cd:1d:5d:78:2b:
7b:b5:d4:1a:f9:b7:6c:9a:cc:9e:30:53:fd:12:95:
17:b3:08:59:f7:b1:68:4b:59:98:d9:fc:25:e0:18:
e8:1a:a6:30:af:86:29:58:b1:cd:e6:30:4a:7e:25:
3f:8e:22:42:11:8f:1d:63:41:1c:e3:3c:4d:61:84:
4d:89:9f:09:64:0c:4a:e4:97:c6:22:8d:fc:46:24:
d3:94:18:a3:ff:30:0a:d5:1d:e1:e6:36:8c:1a:32:
cd:6f:5c:c9:9d:2b:28:a2:97:66:c6:63:da:40:fe:
32:5b:e0:3c:0e:19:70:23:d2:93:81:f7:1c:4c:5d:
5c:6f:2c:c7:8f:d8:21:4a:d9:b1:f7:c8:0f:03:7c:
3e:f6:ae:70:e8:b8:34:00:b9:22:9b:0c:fb:f9:81:
b2:9f:38:ac:b8:00:d6:b1:ad:7f:de:be:1f:df:29:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:2E:0B:38:66:C7:62:A5:88:56:73:51:54:45:34:31:3C:F6:AD
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:bc:cd:8c:14:6c:a5:0e:a6:94:3e:99:73:db:81:bd:bf:
04:54:e1:07:9c:82:e0:d8:15:28:f2:91:e7:a2:08:77:2e:7c:
ae:c4:74:60:1b:48:31:d6:9a:a8:32:3d:c2:cf:4e:29:10:a3:
ca:8d:c6:29:31:71:65:90:20:3d:79:80:64:1e:ef:8d:0b:61:
63:5a:b1:ea:f6:61:59:e4:60:90:36:c2:6c:59:a6:a4:c7:9f:
0a:8a:b3:55:15:df:7c:21:af:40:11:c8:5b:c8:83:8f:e8:4b:
29:b0:10:8f:1d:33:be:f1:fa:fd:1e:aa:60:58:77:77:b5:f3:
5f:a5:7e:87:47:22:3d:24:56:70:f1:2a:2c:7c:0b:63:02:47:
83:f2:63:fe:de:8b:cc:7c:c6:8e:ab:e1:d3:a0:5b:8d:13:ce:
74:70:ef:5a:a2:4d:07:c4:c6:3b:98:e2:db:b0:56:67:24:77:
3c:8d:94:8e:04:52:a6:78:65:7a:9c:fb:c4:2d:30:00:b3:e7:
0f:0b:ed:3b:cb:f8:ff:a7:43:4d:8b:3e:73:bc:40:91:b8:53:
ac:f7:7a:ad:50:90:4f:60:7d:36:24:4f:07:95:f6:10:5f:d4:
41:6f:aa:85:86:9f:6f:74:13:8e:87:d1:43:d1:12:8e:ed:27:
9b:b9:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:09:18 2025 by rpki-client