Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: Aus8ToTM0UVUr2bWMIj4iUKQ5L3+P5bw36LD+Qdj+54=
Subject key identifier: 71:71:D5:FF:D8:E4:44:AB:99:D6:EF:8C:DC:4B:03:87:02:B5:A5:2A
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 01984776F8F27F489F08846EB626E1A37D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:35 +0000
Manifest this update: Sat 26 Jul 2025 16:00:35 +0000
Manifest next update: Sun 27 Jul 2025 16:00:35 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: bQMjeIkCUUGE+nD4yKWmzFUwiw9fYqXrrPBTfqf7V6A=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f8:f2:7f:48:9f:08:84:6e:b6:26:e1:a3:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Jul 26 16:00:35 2025 GMT
Not After : Jul 27 16:00:35 2025 GMT
Subject: CN=7171d5ffd8e444ab99d6ef8cdc4b038702b5a52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:6f:e8:39:89:8c:11:da:3c:7d:cc:ec:c0:
21:a7:69:b2:88:cb:d3:4b:65:0f:1b:66:d3:3f:80:
d5:19:35:1b:19:32:7a:9b:1c:f0:fb:84:45:71:a9:
be:f6:48:ad:5f:9f:bb:4c:47:ae:43:3b:93:75:ba:
44:97:52:63:92:6a:ce:90:b8:2a:65:20:19:e9:0a:
6e:6b:17:da:d0:b3:36:04:f2:62:ed:74:e6:a6:df:
d0:fc:51:08:2e:96:b3:44:11:46:87:89:3a:f4:6d:
eb:7d:32:a7:0a:e7:38:23:05:af:a4:ac:65:e6:52:
f8:1a:02:c1:65:3c:21:ba:66:07:c2:09:3a:58:26:
c5:70:15:6e:df:4a:c0:09:87:5e:78:13:29:c7:8d:
af:34:5d:73:26:9c:a9:1e:fd:5d:23:b9:49:4e:c3:
c0:bd:cb:0f:2e:c6:18:7a:8e:a8:2e:6b:2d:cb:bd:
a2:3f:45:83:c2:95:b7:c4:7a:c8:b0:4d:d7:84:63:
0c:d6:62:0b:ff:22:0d:61:3c:04:6e:1c:19:3d:4c:
91:fd:4c:6c:99:39:32:0a:64:a7:42:8e:45:74:26:
31:45:db:35:80:fc:00:57:81:33:e0:98:da:51:a8:
6e:54:14:c7:a4:33:f8:4e:b3:51:99:2a:6c:33:eb:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:D5:FF:D8:E4:44:AB:99:D6:EF:8C:DC:4B:03:87:02:B5:A5:2A
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0c:27:fa:4e:03:27:9e:e2:84:e6:76:a6:fb:8d:31:1c:47:
7f:ab:32:72:96:21:ad:bb:b9:57:61:50:62:d4:c3:a4:5f:86:
e5:9f:c0:ba:e5:51:0f:d0:41:b5:77:e0:10:dc:6c:1d:f6:52:
51:11:6c:ef:87:a7:5b:01:c1:b9:8a:21:f0:32:a2:a6:db:ed:
92:00:db:dc:73:8d:83:e7:c0:2b:3d:ce:f7:0b:8d:ef:2c:68:
0d:a6:08:09:fd:c8:f3:e7:e0:78:68:2a:b8:e2:3a:8f:1e:4f:
01:a5:6b:48:33:89:c8:e0:d5:60:bf:23:70:47:6b:58:9e:88:
b2:0c:27:c5:68:35:8e:ca:4e:5a:ae:52:03:89:04:45:45:85:
a2:b3:cc:d9:23:61:20:60:41:9f:95:22:f2:0b:75:85:b3:99:
e6:1f:93:8d:e9:99:4d:7f:30:ba:b4:d7:32:e5:a5:2a:54:d7:
47:83:f2:d6:45:ee:b9:c6:52:3a:20:58:bf:aa:bc:f6:ff:42:
b5:77:b6:44:de:be:ce:b8:50:b1:74:88:7f:30:6b:e1:4a:0f:
f3:fa:06:b3:f7:bb:b7:3b:e3:44:66:7c:9e:ca:38:0a:1f:43:
18:12:0e:22:04:26:37:26:78:97:af:3c:01:da:ae:0e:c0:96:
f1:eb:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:39:44 2025 by rpki-client