Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: yWgEysOKDa+7DMbYTaNb9yAAbbXtCzYJUeh2jOtLp+U=
Subject key identifier: F7:D1:0A:8A:18:41:F4:F2:28:77:B7:0A:03:5D:A0:86:B3:6C:B1:84
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0198458A3CF202D9FAC34DD4D5EFDBAE3BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0DCB
Signing time: Sat 26 Jul 2025 07:02:24 +0000
Manifest this update: Sat 26 Jul 2025 07:02:24 +0000
Manifest next update: Sun 27 Jul 2025 07:02:24 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: TEUjx3g7ZYMIre+rxvz2fdoFAD/t6boDkNvYyDY7M14=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:3c:f2:02:d9:fa:c3:4d:d4:d5:ef:db:ae:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jul 26 07:02:24 2025 GMT
Not After : Jul 27 07:02:24 2025 GMT
Subject: CN=f7d10a8a1841f4f22877b70a035da086b36cb184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:4d:22:5b:3b:1d:1e:59:a6:66:54:50:d8:
14:66:34:85:32:d9:86:28:ea:39:8c:c8:fc:c6:7b:
c4:45:bc:4d:18:10:9a:63:a5:8c:8d:55:6a:44:07:
38:32:0f:e7:1a:4a:e8:45:b4:50:bd:3c:bb:e4:9b:
00:71:ac:c7:e9:fe:c9:ce:be:dd:19:45:a3:4c:3c:
52:b7:c1:51:de:0d:fd:2c:b3:bf:5e:c6:37:c4:c8:
07:24:b5:8d:e9:3c:36:24:c1:18:e6:0a:ca:3f:d1:
78:30:3f:a0:8d:14:d2:b6:30:b4:9c:64:b5:cc:25:
b6:c2:28:89:19:0f:a7:93:47:15:5b:e7:d0:00:58:
ea:f0:93:53:92:fe:1b:c2:6d:d5:bf:50:8c:80:c4:
f0:d3:5a:0c:1e:f3:fa:0a:92:0c:77:66:03:b9:38:
3a:2b:1d:d4:e6:71:80:f4:d8:c4:79:83:68:bf:58:
84:f0:bc:18:19:7c:0d:93:57:36:34:3d:a2:d5:3b:
b7:69:ec:58:5f:f5:d4:75:fe:7a:10:41:85:4b:cb:
23:63:52:45:ec:b4:a7:7b:77:00:3b:ea:aa:7f:0c:
e2:ef:f5:46:c7:ed:22:e9:ef:a0:da:81:82:b0:4f:
6c:12:a0:fe:48:29:4a:42:ec:eb:d9:90:64:44:88:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:0A:8A:18:41:F4:F2:28:77:B7:0A:03:5D:A0:86:B3:6C:B1:84
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:e3:a2:2e:18:88:18:03:ec:53:d7:91:e2:3a:f9:8f:54:
fc:c2:89:e2:c6:68:9e:dd:72:92:d2:4d:66:c1:8c:f1:ca:0f:
bb:ec:74:17:47:f7:49:35:28:cc:b3:d2:1d:08:ff:d0:c0:3a:
cf:83:c9:55:4e:e7:d7:86:52:70:c3:48:b0:e3:b8:5b:de:00:
bd:52:85:e7:9e:c5:79:9b:d5:98:fa:6e:68:1e:5f:2d:e9:c3:
ad:e2:db:57:11:27:25:af:e5:69:12:3d:0c:90:0c:5f:82:f1:
bd:c8:b8:9c:20:76:36:41:11:f7:90:7d:27:f2:43:13:9b:1b:
d1:92:34:d8:c6:6b:39:7b:7c:ec:b2:d4:42:8f:0d:d9:d2:4c:
82:83:21:2d:73:14:3e:ee:f8:8d:df:97:99:c4:8b:37:23:d6:
13:37:38:5a:c2:81:87:56:00:03:5a:78:24:23:0a:f5:71:27:
c6:62:35:be:cc:49:d3:43:78:38:95:29:09:21:bc:65:14:5b:
8c:66:61:21:95:67:14:00:81:95:92:ae:29:0d:25:01:86:38:
e5:74:2f:7c:1e:bd:6c:90:89:56:74:88:66:83:cf:ce:e0:fd:
9f:83:06:d6:ca:0c:c4:f3:05:0e:f4:73:de:39:69:33:4c:d4:
93:7c:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:37 2025 by rpki-client