Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: CYILOG/047mWHEkYUaCL/0aASPm7uFIBziCGERBMs0s=
Subject key identifier: C2:AC:9D:03:A7:2E:51:0A:68:1A:F7:48:CD:C7:C4:2B:8D:10:66:DE
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019827EC83E937B1665D96A6C413C50C568F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 15F1
Signing time: Sun 20 Jul 2025 13:01:08 +0000
Manifest this update: Sun 20 Jul 2025 13:01:08 +0000
Manifest next update: Mon 21 Jul 2025 13:01:08 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: XDsAljDWP8X/O4Q4N4onIfdZBUgqYlgj8TmFU9AzO4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:83:e9:37:b1:66:5d:96:a6:c4:13:c5:0c:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jul 20 13:01:08 2025 GMT
Not After : Jul 21 13:01:08 2025 GMT
Subject: CN=c2ac9d03a72e510a681af748cdc7c42b8d1066de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:cb:2d:f5:21:d1:be:62:4c:da:b4:34:f8:
b9:22:23:46:86:f2:8f:2c:1b:18:e5:16:b0:6a:29:
25:93:a9:8d:db:ef:62:55:de:92:e6:d1:8e:2e:10:
d9:f4:cc:56:51:ec:84:40:83:c8:19:5b:aa:26:7e:
95:db:9d:67:f9:52:0b:70:4a:50:fe:0f:87:b1:a6:
82:2d:d8:67:f2:a8:69:70:5c:ff:ff:4d:bd:5a:2f:
2c:de:8d:7f:58:79:13:12:76:4e:6f:0c:ec:03:88:
e4:70:f7:c6:b5:18:05:4b:4e:c6:35:d4:fb:c2:6e:
bd:c6:2a:7d:28:be:54:f4:7f:c5:64:fa:a5:22:9c:
74:70:37:cb:16:a1:59:df:51:7f:9d:0a:c7:08:c9:
cc:a3:a7:1c:43:0d:16:e4:8f:76:6a:2d:a3:08:fa:
95:29:e8:71:13:2c:51:95:82:71:fb:f8:7a:e8:12:
c2:33:9e:16:b0:93:c6:1b:c4:59:19:d5:f0:ea:ee:
4f:29:6f:98:4f:ce:76:14:cd:9e:a1:67:7f:6f:19:
fe:98:0c:e9:05:16:d5:49:15:09:1c:93:18:0e:43:
a4:95:9a:a5:f8:18:d0:2d:53:88:9f:61:4a:f9:bf:
c0:67:37:e9:02:6d:ca:6d:30:cf:cc:98:8e:d0:d4:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:9D:03:A7:2E:51:0A:68:1A:F7:48:CD:C7:C4:2B:8D:10:66:DE
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:c9:08:8f:46:3a:f4:d6:b3:6b:21:a6:3a:27:3f:c6:69:
b3:c2:2e:67:49:24:2a:a0:88:2b:41:57:94:9a:9e:c5:90:ec:
fc:08:2b:be:5e:67:71:3a:60:4f:e2:bc:14:0c:6b:d6:b2:9c:
e9:30:30:f6:a8:2d:bd:d6:31:4a:81:2e:24:01:85:f6:70:75:
fb:02:41:5b:99:c7:4e:fe:08:19:6c:c4:6d:7e:56:27:e4:b9:
4d:10:a4:ce:8c:42:3e:75:6b:18:22:91:f2:5d:8f:c4:6f:74:
f9:b7:8e:f5:de:8f:16:5d:2b:87:01:72:5b:98:25:af:f7:d9:
06:7c:d7:02:e6:c3:f7:c5:38:36:34:9d:a7:23:5c:8a:34:d4:
61:36:90:18:3c:67:39:e8:b4:a3:93:62:fe:dc:cb:3b:64:ec:
51:bb:07:9e:f8:27:7e:46:a4:59:22:fc:c8:1c:e0:ff:d7:56:
da:d9:ae:65:9e:fa:1e:32:ea:5e:bf:36:c4:00:15:19:7a:cc:
fc:2f:a1:f6:c8:d1:ce:87:94:d8:33:0e:2c:c4:6c:64:74:10:
ba:e2:2a:bd:09:d8:9a:0e:ae:28:dc:3a:40:0f:6a:ce:98:74:
56:4b:2c:e3:04:4f:84:f4:54:ad:59:5c:2d:29:08:6a:1a:23:
b3:10:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:27 2025 by rpki-client