Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: KmiPvZMqVXJcoRJf06UfcsI6lrF5QzDHHBAp23k4w80=
Subject key identifier: BA:17:AF:9E:4B:4A:64:50:E8:9D:6A:19:8C:82:08:A9:4C:0A:1F:3E
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0198537B26FB2CAFAF723B17751FC3F73966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 06B2
Signing time: Tue 29 Jul 2025 00:00:36 +0000
Manifest this update: Tue 29 Jul 2025 00:00:36 +0000
Manifest next update: Wed 30 Jul 2025 00:00:36 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: AnB3TuYHWfjAgWvSs3TqDWQUHEYYHCYP9MPBKJYYtAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:26:fb:2c:af:af:72:3b:17:75:1f:c3:f7:39:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jul 29 00:00:36 2025 GMT
Not After : Jul 30 00:00:36 2025 GMT
Subject: CN=ba17af9e4b4a6450e89d6a198c8208a94c0a1f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:dd:1a:3d:9b:c6:d1:8f:9f:77:c1:4c:bb:
46:30:8e:96:39:e5:3f:a5:f3:9d:40:1f:97:76:0a:
5f:e0:95:68:b9:37:e2:e7:05:61:c3:cf:de:6a:42:
6e:b7:4c:4e:7a:a9:55:d6:08:dd:c3:b0:b0:9d:87:
9d:cf:0e:31:0c:9e:0b:57:58:42:59:9e:52:92:ae:
9e:92:73:20:d8:e8:25:2e:de:74:17:89:80:07:c0:
9a:60:1d:e4:5d:7e:ee:33:5a:7b:e1:6a:24:3f:de:
13:9e:90:d8:8d:8c:17:45:66:a2:22:d1:22:58:d2:
cd:25:c1:8c:61:b0:51:c1:e5:a8:ef:e0:49:31:1f:
34:15:2a:21:55:d6:f4:83:37:11:d7:b5:d9:95:99:
c2:62:8f:e3:5f:0c:74:e7:fc:49:c1:f1:82:06:69:
c2:d3:2d:43:b3:c7:57:21:ba:71:39:ce:60:ea:3d:
96:3b:d2:69:ad:c7:36:21:13:63:01:ec:d8:73:e3:
5e:2d:50:97:2f:bb:af:53:ac:91:33:03:0f:7c:c4:
0e:21:33:a9:0e:2c:48:4a:5d:c2:84:ee:20:3f:a5:
ee:67:74:45:bb:54:52:9c:6a:60:31:79:9e:ee:58:
0d:45:c4:97:f2:d4:17:0e:cd:fd:cb:0d:a5:a0:4d:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:AF:9E:4B:4A:64:50:E8:9D:6A:19:8C:82:08:A9:4C:0A:1F:3E
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:44:57:8a:09:03:51:03:65:9b:77:57:dc:c4:36:94:06:b0:
63:f8:89:b7:de:8c:ea:a9:ae:9f:27:c6:41:53:22:ff:60:52:
13:ab:60:52:2f:08:6c:7d:af:09:b0:d0:dc:34:cf:84:10:06:
40:cc:aa:0d:60:61:d3:ac:0e:2d:63:13:c1:1e:93:e3:ae:71:
81:b3:50:4b:9a:1c:69:1a:4f:a1:56:d4:16:21:c6:ff:79:f8:
fe:7a:d1:cf:47:76:e8:fe:c2:75:4a:36:87:90:31:7b:bd:42:
8e:70:4b:21:3e:d8:97:46:ae:76:8c:23:c5:f3:16:a1:16:a2:
6a:7d:8b:bb:b1:0f:8c:25:59:fb:17:cd:1c:74:00:4e:09:6d:
c6:7b:b7:24:3c:5b:21:ac:59:4b:20:4b:5a:88:b9:53:99:cc:
99:ca:48:87:23:9c:c2:cb:30:c9:e2:93:eb:fd:60:7c:c0:99:
05:8e:90:cf:b3:9d:4d:25:b6:15:0c:a7:f2:0b:22:74:5d:00:
f5:74:f5:24:e8:16:95:c2:84:17:23:52:ad:04:73:c5:b0:7e:
4d:dd:ea:94:7a:b6:93:24:dd:15:d5:23:0e:55:13:b9:f0:fa:
a3:19:a5:2a:96:41:d0:c7:de:7c:b0:74:ad:80:7d:ca:35:a1:
66:e6:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:45:29 2025 by rpki-client