Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: uWZW5l0L/ssQ6l+hVoH3z9NkA19oN92s2diA1hpIMmc=
Subject key identifier: 58:61:CC:6C:D9:CF:73:0B:BB:D8:E4:68:B5:EE:C4:46:2D:3C:6A:B2
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 0198499C71BB1035DE0B58AEA69D11176098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:46 +0000
Manifest this update: Sun 27 Jul 2025 02:00:46 +0000
Manifest next update: Mon 28 Jul 2025 02:00:46 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: 4KHjBPkSwuvTKNpM0ywU8NKd1PRaygUS8W5K19kJE8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:71:bb:10:35:de:0b:58:ae:a6:9d:11:17:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Jul 27 02:00:46 2025 GMT
Not After : Jul 28 02:00:46 2025 GMT
Subject: CN=5861cc6cd9cf730bbbd8e468b5eec4462d3c6ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:2c:d4:3f:7a:33:48:4f:4a:2f:50:91:dc:
d3:cf:97:79:cd:7f:7d:d6:68:7a:80:f5:e6:2c:5e:
a0:1a:1d:de:23:e3:ef:25:0b:d1:af:99:3b:08:02:
5b:e4:44:ed:f9:f7:41:73:fd:59:cc:ec:c2:1b:26:
30:d5:a2:02:47:76:ed:ad:31:68:7e:a7:c0:31:43:
db:08:91:eb:4a:fc:ac:94:6e:be:fe:2d:41:08:d9:
e8:63:c7:b1:4f:d5:01:0a:e8:67:87:2d:01:15:f3:
66:ee:bd:60:65:c3:97:b5:e8:42:05:8e:2b:c9:29:
fe:5e:2c:43:f8:98:83:a0:6d:5a:b1:fd:bd:0e:5a:
be:96:ac:89:b9:ef:7b:db:1d:21:44:56:5f:9b:bc:
0a:44:df:24:39:83:e7:28:ab:4c:34:2c:81:40:ac:
6c:54:09:65:14:ab:51:90:5d:d5:2b:8e:a2:ef:d1:
f4:09:76:71:6b:e7:b5:29:ec:ad:5a:69:46:cf:25:
15:46:b7:bd:26:41:29:9d:f3:6e:cb:e1:75:73:77:
71:10:2d:15:8f:60:8a:ed:a5:f6:9b:47:3f:0c:47:
7c:c5:09:ab:8b:e0:41:5b:e3:59:bb:86:50:64:58:
d2:1c:65:5d:ac:b1:8e:b3:23:9a:6e:7f:d0:f9:87:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:CC:6C:D9:CF:73:0B:BB:D8:E4:68:B5:EE:C4:46:2D:3C:6A:B2
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:76:2b:5b:2e:ed:6f:cc:6b:42:fc:e3:82:18:40:ac:53:
55:8d:1e:a0:47:a9:af:09:a3:c4:23:53:45:f5:20:1f:34:d0:
4d:04:03:3d:95:e3:db:f9:cf:b8:bc:7c:e3:81:8a:69:e5:27:
a5:0b:7d:36:6b:b7:73:e1:e5:05:e8:ac:8b:76:91:1e:72:a5:
f9:cc:a9:6d:e9:0c:f2:2b:51:f9:ff:1a:6a:f9:0e:8d:7c:61:
35:2d:96:2c:c3:db:6d:05:cd:93:e7:3b:61:b9:54:19:a6:94:
09:05:bc:6c:7d:fd:53:fd:9d:a8:4a:b3:f4:a7:fc:d9:c8:23:
55:43:8d:8d:c6:1b:14:30:0c:70:d5:96:be:73:6e:23:52:aa:
ac:96:52:af:8a:b8:20:af:21:45:91:f4:4c:aa:07:05:0c:e8:
32:d0:1e:b1:fa:aa:62:a8:4d:2a:17:9f:78:7f:2f:28:67:99:
af:df:45:71:ae:1c:86:2f:77:d4:ac:a3:dc:43:87:50:31:e2:
f1:cf:2c:a3:e4:17:ae:6a:6a:fa:f6:f1:79:2e:29:87:3f:16:
d6:a0:1a:8a:83:bb:a1:1b:f1:57:ec:1f:e7:e7:c3:62:49:37:
38:93:94:76:ca:2e:d8:96:56:db:b4:d9:59:6f:4c:32:26:c0:
8a:fb:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:49 2025 by rpki-client