Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: MNCWsUCusjHFW0SCr+D0/E36H6cvbfmyc6w2RaLIQ0E=
Subject key identifier: FF:15:EF:DF:BB:EB:DE:7A:63:71:AB:13:92:84:13:8C:0A:20:D1:3C
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01984777EE4F954071CB79159ECE99C16D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 16:01:38 +0000
Manifest this update: Sat 26 Jul 2025 16:01:38 +0000
Manifest next update: Sun 27 Jul 2025 16:01:38 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: KKbNm32ZjPsA4zNcG4F7LNGxr8YEaDcUadbDZj1w+S4=)
2: rdvag5pHs9es_gyoqlFPFe0V7WI.roa (hash: ckptdnrG1RV/ZZ5MTTowIZnIHeIBz++eWuv3IdAEj3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:ee:4f:95:40:71:cb:79:15:9e:ce:99:c1:6d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jul 26 16:01:38 2025 GMT
Not After : Jul 27 16:01:38 2025 GMT
Subject: CN=ff15efdfbbebde7a6371ab139284138c0a20d13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:36:22:f3:42:94:1a:a7:ec:ab:64:d2:76:
99:4d:52:4b:f3:e3:bb:c0:5a:19:10:28:9a:a8:19:
49:ea:2f:4d:a1:04:f4:df:9b:48:81:78:3c:2c:43:
78:a5:80:6c:cc:77:23:26:71:45:3e:b4:ad:e4:f6:
23:10:08:6a:e5:8b:ec:c3:b2:56:be:af:fb:12:53:
6a:37:2c:7f:99:2b:31:87:76:75:4b:88:9c:5d:5f:
d3:d0:ce:af:40:0e:e5:b3:84:71:45:59:4c:a4:f6:
79:a2:4f:3a:ec:3d:9a:2a:a4:4b:ff:26:d0:03:4d:
69:55:d1:c6:80:ce:91:0f:18:ee:20:ba:a3:42:fd:
b1:65:89:45:b3:17:80:97:43:04:25:ad:72:19:bc:
20:db:16:61:3e:de:3a:84:c9:39:6b:d1:fa:a2:38:
b1:36:88:bb:56:18:ba:56:80:c2:90:39:a0:d5:f5:
6b:5f:17:c2:a6:94:32:ad:36:a2:05:97:71:3c:60:
94:e1:cf:11:43:5e:f9:bb:3f:a0:46:23:57:3c:f0:
d7:bb:9b:ad:db:27:29:c6:93:3d:7f:7e:62:66:3a:
26:ac:2b:32:89:39:ad:c4:60:90:0f:43:fa:86:fc:
a3:1e:51:e9:77:de:98:22:a3:1b:c3:9f:2b:6c:0d:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:EF:DF:BB:EB:DE:7A:63:71:AB:13:92:84:13:8C:0A:20:D1:3C
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:88:0e:d5:47:68:eb:28:40:29:b2:fb:f9:7f:4c:7d:51:e4:
9a:d9:da:80:7d:11:d6:59:6a:27:45:6a:a7:eb:d1:41:81:b4:
c2:f1:67:35:d5:b5:e5:26:f8:58:c5:15:a3:e5:c4:29:fe:a2:
14:47:e8:7e:ed:5f:2f:bb:c9:1f:74:90:30:50:c0:dd:95:03:
e4:fd:5e:d3:1c:49:9c:97:ea:ed:3e:d8:72:f0:12:21:25:34:
1c:6c:a9:0f:b5:d4:00:17:ae:6c:a5:73:e5:0a:b2:28:ea:da:
4f:6b:c3:f8:fe:4e:1e:e3:35:43:15:82:c8:52:08:93:ad:09:
a3:4f:19:65:24:2a:53:71:48:6c:f7:48:07:51:6f:57:30:b1:
d6:ec:45:7c:37:a9:d3:7d:0b:f5:f7:5f:fa:0b:8a:4b:55:a1:
e3:c8:da:b3:00:ed:d9:0c:e4:9b:ee:f2:72:a1:13:a9:b3:61:
3d:1c:87:5f:6f:da:57:6b:68:37:49:56:5b:ff:24:ce:2b:5b:
eb:b0:a4:41:d7:7e:7c:e8:54:37:60:86:39:bd:15:bb:bf:02:
d3:b4:c0:0b:86:1d:d6:cf:60:4e:07:cd:8c:d7:e9:0e:0d:06:
17:06:f0:7f:db:30:0c:ae:0e:e8:d0:7e:54:4c:18:c8:7c:12:
6a:23:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:00:53 2025 by rpki-client