Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: IQeDdgmgdx9nt8P+PkCpiv6My963pcEDKiwFvZMOVr0=
Subject key identifier: CB:B8:68:72:59:76:61:BB:5E:C9:6B:64:E6:D0:15:C9:D6:D8:EE:2F
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01984589C8CBEDA2FB54F3807F8DB5454B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 101F
Signing time: Sat 26 Jul 2025 07:01:54 +0000
Manifest this update: Sat 26 Jul 2025 07:01:54 +0000
Manifest next update: Sun 27 Jul 2025 07:01:54 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: CRXq4KMe0CtdayHgtrvFuns2B7hj8VLbijLa5F0gEfQ=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:c8:cb:ed:a2:fb:54:f3:80:7f:8d:b5:45:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jul 26 07:01:54 2025 GMT
Not After : Jul 27 07:01:54 2025 GMT
Subject: CN=cbb86872597661bb5ec96b64e6d015c9d6d8ee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:82:24:e9:bb:b3:b1:18:c4:6f:64:f4:5b:
94:15:08:a9:23:d0:21:0c:f9:cc:88:f8:a4:80:db:
f4:97:c6:62:d4:aa:af:43:18:fe:ee:06:cc:81:38:
fc:25:d0:66:20:24:f6:aa:67:75:5a:52:4c:64:8a:
c6:d3:7d:36:67:3e:d2:08:63:1a:90:b7:2e:7d:89:
8c:4d:2b:e1:e3:cd:0a:3f:7e:29:47:77:ca:d7:a0:
80:46:cc:84:4d:b6:83:6e:a6:8f:b3:7e:68:d6:2a:
76:6c:2f:5e:24:e1:b7:88:3c:a2:93:29:1c:b2:39:
ee:b7:d7:76:5a:72:de:a3:eb:68:1a:d0:0c:ed:bd:
0c:25:5c:de:12:cb:0c:78:a2:79:e0:42:4a:0b:b2:
55:2c:73:32:d6:d9:d4:53:c1:eb:b4:6d:cf:85:e0:
23:ba:21:da:d3:2a:91:f1:cc:4f:66:e3:45:7d:d4:
11:70:f4:b0:e1:6c:7d:56:bc:11:51:ef:50:2f:43:
cc:bc:10:72:4c:fe:d5:86:b5:63:26:65:7e:af:fb:
a8:a8:75:14:fd:84:92:06:f5:c8:8d:9c:9b:d7:57:
41:15:30:30:0c:0f:9e:6d:7e:d6:62:05:b4:6d:3b:
83:b9:5f:87:57:f5:eb:4b:63:96:ff:60:1b:4b:79:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:68:72:59:76:61:BB:5E:C9:6B:64:E6:D0:15:C9:D6:D8:EE:2F
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:1a:85:24:e6:b7:1c:df:3b:12:79:f1:b6:2a:31:1a:9f:
e8:87:b3:9f:f9:28:68:a6:6d:84:20:78:99:c2:a3:05:1e:89:
a4:22:be:1d:19:93:82:a3:11:40:5a:dc:39:be:fc:5a:fb:f5:
d0:c5:b8:64:c5:dd:a8:3b:7b:8f:63:3e:66:86:bb:c4:85:3e:
f9:0a:0f:a0:b1:30:31:4c:74:0e:a6:7f:54:71:58:ab:8f:e4:
6b:21:12:76:4f:df:e1:b1:4c:48:12:e9:86:fc:98:59:5e:b7:
ff:53:73:fa:3f:d3:80:d8:8f:e1:83:81:2f:cc:e7:8f:e4:e1:
fd:85:0a:7d:70:16:eb:aa:c3:98:b3:dd:9b:33:68:91:b5:31:
cb:b8:57:6e:9d:a4:26:0f:17:d3:d9:6e:c8:2f:2a:39:07:97:
71:d5:0d:b7:7f:4a:29:07:2b:5d:dc:b6:4e:4b:23:22:39:ed:
a7:5f:d1:6c:20:e3:7d:e9:bf:d5:b9:e2:32:47:a7:20:f5:a4:
49:55:02:eb:d8:c6:ef:39:1c:8c:9b:ce:51:23:d9:e5:22:fe:
a8:f2:49:d0:75:6c:3b:27:10:c5:3c:bc:38:2d:53:14:b7:54:
df:fa:91:31:31:c0:c8:23:9c:bd:93:8e:86:d7:df:81:d9:66:
e2:77:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:21:24 2025 by rpki-client