Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: Conb0EMeLLaBo9rX5Z8HdpQeNAFqkBFm3+gOHLCz3bQ=
Subject key identifier: CC:25:0F:F2:AC:85:8E:D8:58:8F:82:9F:35:77:04:A5:F1:C0:0C:B7
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01984F3037FFD80EC18CD408CC183AD88C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 04:00:16 +0000
Manifest this update: Mon 28 Jul 2025 04:00:16 +0000
Manifest next update: Tue 29 Jul 2025 04:00:16 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: xMkA22r8p4Tn0zODHGfpJ9X+W4rR09QZKUll+6lmOck=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:30:37:ff:d8:0e:c1:8c:d4:08:cc:18:3a:d8:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jul 28 04:00:16 2025 GMT
Not After : Jul 29 04:00:16 2025 GMT
Subject: CN=cc250ff2ac858ed8588f829f357704a5f1c00cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:19:f1:b1:28:59:c6:b7:f8:ea:2c:93:3c:
4a:73:f2:44:b9:3c:94:d7:06:8c:92:ba:84:c1:79:
d0:b4:d1:cd:a6:bb:ac:e1:db:50:46:72:cc:73:4a:
20:ca:f7:45:fe:20:12:6f:f2:b8:0f:c8:88:ab:79:
00:dc:cb:a8:7c:64:ec:31:0b:60:c5:a2:0f:1e:2a:
a2:ab:be:3d:06:88:e1:06:6b:6a:9d:45:31:4f:4f:
62:78:3a:ab:a9:8e:dc:32:e1:05:18:f8:6d:98:01:
03:b7:f3:ed:1d:ff:06:53:20:61:1f:20:31:1d:09:
32:c6:10:fa:be:66:54:6b:95:c9:e9:3e:5d:15:e2:
3a:07:4d:ab:58:11:13:58:17:7f:0d:dd:31:85:9c:
33:be:3d:b9:e1:e5:50:03:30:fd:d5:7e:6d:85:3b:
98:19:aa:c0:5b:44:be:c9:d8:79:71:93:2a:03:52:
77:07:c9:4c:22:44:f8:98:ce:19:4d:97:2c:35:36:
93:3f:ab:61:e8:18:31:4e:a2:e3:ee:57:4d:3b:6d:
3f:c2:21:8e:d6:be:46:8b:ce:57:ad:ac:d7:e8:9a:
60:f7:83:89:0d:f2:bd:94:eb:b9:ac:35:51:30:86:
4a:be:7f:da:f6:9a:89:37:ef:32:6e:46:96:56:ad:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:0F:F2:AC:85:8E:D8:58:8F:82:9F:35:77:04:A5:F1:C0:0C:B7
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:09:33:21:b4:9f:72:cf:71:45:13:4d:a4:93:7c:14:1f:
b1:02:4c:24:42:ff:70:85:4a:38:27:bf:3d:55:38:86:3e:48:
3e:00:71:b3:de:5f:92:e9:bf:09:25:9b:48:c1:05:e0:c7:bb:
f2:c7:9d:86:16:29:b3:b2:e6:d7:15:c9:40:5b:db:19:ab:aa:
55:f4:4a:71:ef:c0:a9:90:67:12:77:ca:ec:9c:66:78:dc:fa:
6c:0f:5b:ad:29:ea:9b:e7:5b:c6:2e:b7:94:70:ea:33:be:0d:
ec:36:c6:15:d0:75:15:40:47:3b:dc:1b:cc:f1:38:b7:40:1a:
c6:9b:52:c8:e8:ba:77:ae:68:eb:14:be:18:02:99:7b:b1:36:
f3:e3:8a:7b:38:f7:2a:09:0d:34:10:3f:96:31:6b:44:f8:28:
6b:5a:72:1d:04:b5:c9:34:0d:a5:c5:fc:fc:86:07:5b:d2:6d:
96:b9:5f:87:ab:f9:e5:57:44:75:93:df:f2:db:91:fb:9f:9e:
8c:3f:f8:2f:64:28:eb:5c:ff:4f:fd:56:dc:f0:18:64:1f:d2:
10:05:67:71:4d:53:70:79:33:9c:c4:10:21:c2:7c:57:d0:78:
2c:85:e5:db:dd:69:9c:fc:cc:24:c6:50:d6:78:b4:b0:30:ff:
1d:a8:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:12:39 2025 by rpki-client