Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: uYCkG1LdsZ5LHWmG1b13v881t+Dahxfch6olMU7P3no=
Subject key identifier: 29:56:B2:8F:C2:CD:B0:09:FE:58:CE:11:E3:B5:44:70:72:BD:07:DC
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 0198394D251DC78EF7994B8E31B4BF23A863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 15F8
Signing time: Wed 23 Jul 2025 22:00:13 +0000
Manifest this update: Wed 23 Jul 2025 22:00:13 +0000
Manifest next update: Thu 24 Jul 2025 22:00:13 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: Ciu1nENhqGBSFq0JIboWcWYqgTMpQ31YMDLgHe2UF3M=)
2: NPr8_e46sz8H4JR5QlVGvECNy6k.roa (hash: z5xILP0Xt/AwC2kYkY04BjCbsF3nJbNXJ0hJj+W9BVk=)
3: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:25:1d:c7:8e:f7:99:4b:8e:31:b4:bf:23:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jul 23 22:00:13 2025 GMT
Not After : Jul 24 22:00:13 2025 GMT
Subject: CN=2956b28fc2cdb009fe58ce11e3b5447072bd07dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:4a:60:1e:fb:1d:75:78:9f:7b:ab:1b:2b:
48:46:10:83:bf:dc:81:62:36:fe:d6:61:1c:1b:75:
ed:ae:2a:df:8f:29:dd:40:a3:29:06:ca:19:fa:28:
bd:4b:5d:3e:47:ad:4f:ae:28:0b:a3:77:51:56:fb:
80:ae:7c:68:69:49:e2:a1:ee:93:7f:ab:6f:ab:a4:
85:75:32:e5:a7:93:34:98:57:2e:cc:f2:0d:70:31:
86:49:01:47:a4:56:7c:86:9a:ff:c5:85:cf:67:f7:
c3:12:5e:6d:bf:cb:5f:60:8f:0e:ba:d6:56:63:2e:
58:a2:9c:1d:fe:c0:48:75:7e:10:ff:47:cf:fb:f3:
47:df:a6:00:1e:7a:9c:66:ca:54:84:d5:e0:fb:0a:
17:81:8f:b5:49:df:8c:77:8d:61:70:91:12:37:8c:
2c:83:df:05:3d:8c:45:71:b8:13:4a:44:8f:6d:c0:
81:76:02:f9:1e:a3:21:d3:28:95:a0:11:6d:1e:3d:
cf:c6:c4:30:35:ae:09:de:04:11:4b:86:10:28:b6:
89:79:c7:ee:17:2c:f7:08:56:73:3b:50:cf:92:e3:
32:a8:80:84:94:41:d1:c4:a2:5c:8f:c6:ee:e2:5c:
7f:1a:df:ae:40:61:35:fa:47:e1:ce:60:ed:fa:44:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:B2:8F:C2:CD:B0:09:FE:58:CE:11:E3:B5:44:70:72:BD:07:DC
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:05:3e:92:cc:38:c8:51:a7:0a:e7:ee:f5:e6:d9:bc:54:9a:
7e:b7:71:b7:ef:92:d1:09:1d:98:40:c1:54:52:32:a6:02:07:
69:37:2b:26:03:77:bc:f8:22:18:fc:6d:a5:cf:33:c7:d2:de:
f2:c5:17:f9:f8:d4:d7:0f:cf:45:aa:9d:b3:37:45:a5:26:d8:
30:1d:f4:17:8c:b7:92:8c:ea:5a:db:6e:ac:94:35:00:cb:7b:
5a:46:00:c9:27:d9:10:2d:51:18:b1:47:54:55:5b:3d:e3:2d:
b6:e2:7c:6b:1b:0b:5d:29:b3:3a:48:fc:99:5f:ed:b9:52:f7:
10:82:74:f6:fa:0e:a1:b4:23:87:26:cc:98:15:58:ed:24:2f:
54:e2:0d:bc:0b:ea:cd:d1:0d:50:14:a3:c1:c1:56:01:09:99:
6d:f2:ef:20:9f:51:cf:f4:8b:3b:e4:60:99:b9:e6:a7:59:8d:
2c:9f:1b:8a:f5:9f:71:7f:b2:d6:d8:82:37:12:f3:70:cb:e1:
06:5a:9d:4e:e6:6a:43:15:32:e1:7b:af:49:b3:08:b7:89:ed:
b3:7c:36:bb:aa:02:2c:a3:0e:e9:1a:11:e9:07:b9:79:64:6b:
e0:90:58:5a:49:b0:33:f2:ef:0c:46:c9:8c:9b:72:c7:08:91:
40:02:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:51:01 2025 by rpki-client