Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: Y7NmjK0rJg4nV1Um5eh6xEAqdXtU3xLqgVdaeMhTHrI=
Subject key identifier: 68:BF:E7:08:D3:47:B9:1E:10:03:90:51:C8:9B:BF:AC:E2:2B:A0:9B
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 0198451A60A5E7341A3BD0215C3D9C308973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 0104
Signing time: Sat 26 Jul 2025 05:00:13 +0000
Manifest this update: Sat 26 Jul 2025 05:00:13 +0000
Manifest next update: Sun 27 Jul 2025 05:00:13 +0000
Files and hashes: 1: F89K3Q0XwdNsBMWEF-9n8HX8seQ.roa (hash: k36l/8lxtcKwAJTjrdDRO46ly7DD3aRm+mH7GwvYLjg=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: FavcRt3JlOWO475680hHsSiAiOpv8kvVPcCcnTeniN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:60:a5:e7:34:1a:3b:d0:21:5c:3d:9c:30:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Jul 26 05:00:13 2025 GMT
Not After : Jul 27 05:00:13 2025 GMT
Subject: CN=68bfe708d347b91e10039051c89bbface22ba09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:97:7b:06:a7:ac:f4:5c:7c:03:e2:42:7b:
7d:d0:0d:c1:a1:f5:1d:f4:c0:70:8d:e8:a0:b4:99:
69:0c:fc:dc:d0:ed:9b:46:64:23:37:97:1e:f9:a1:
a3:3a:f3:d9:dd:42:fb:02:ef:3b:79:7e:c8:ee:85:
c2:ce:33:a2:5c:ae:12:31:0b:2a:ea:ca:d4:b3:4e:
e3:e0:9c:04:f7:7f:c6:d7:3d:b1:76:80:7b:95:d6:
df:4d:ee:a7:78:7f:fb:2d:da:99:bf:e1:70:52:e4:
ba:dc:ec:4d:cb:c6:4a:23:c1:10:78:56:fc:f7:ec:
cd:e5:b1:29:24:be:d1:cd:a3:18:16:06:53:6c:b4:
b6:ea:82:99:32:21:62:b3:32:c0:cd:9c:26:6c:9d:
ca:1d:69:7a:40:b3:4a:17:7e:fb:62:d0:00:8f:f6:
a4:87:0c:35:bc:af:4f:ca:50:9d:1f:23:86:7a:ef:
c7:7a:3c:d0:9d:c8:44:c2:ae:37:af:a0:90:37:da:
51:e4:09:bb:0d:64:20:01:3c:9f:8b:34:a0:6a:2f:
d7:c0:59:e3:f7:4a:fc:9d:ae:4a:af:03:7a:b8:88:
d9:cf:bd:7a:86:9d:14:e6:e4:09:54:cc:3a:9f:51:
9e:00:07:b7:0d:fd:eb:59:67:5a:4f:a1:50:3b:f3:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:E7:08:D3:47:B9:1E:10:03:90:51:C8:9B:BF:AC:E2:2B:A0:9B
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:33:47:b1:11:2e:79:9e:45:2a:6c:bf:40:24:f7:1a:16:
c6:60:2a:ea:81:fe:6d:67:80:b2:1c:a1:34:91:13:fa:99:e5:
3d:b1:64:c3:72:34:fe:f0:b2:e3:ad:8c:28:82:c8:33:f6:22:
fa:44:84:58:a0:1a:a3:f8:87:84:16:68:bc:11:f3:6e:7f:f0:
b5:d6:8f:24:51:67:7a:d0:68:db:03:ac:47:32:d5:2b:0b:f8:
d1:89:f7:36:67:6a:51:32:20:84:ee:61:fb:cd:0e:5b:b8:60:
58:3d:fb:4b:db:e2:b5:bd:14:d2:0d:ae:6a:c0:55:d1:90:6c:
13:b7:1d:dc:ff:f7:4e:bf:dd:13:14:20:1f:09:cb:41:0b:97:
ce:aa:77:ae:38:a2:2a:bd:41:fc:7f:f6:e8:fd:3a:f3:31:31:
cc:f5:e9:0e:64:02:98:7d:b9:e5:62:0f:c6:be:fc:25:b1:fe:
96:5b:f1:3c:85:99:61:6f:6f:4c:17:d2:3a:2a:fa:38:15:56:
29:8c:07:14:45:fc:3a:6d:7e:01:b4:75:7e:4f:64:7d:93:38:
9a:61:36:4d:ea:e2:df:fb:89:a9:a4:df:cf:c3:d3:28:15:77:
93:48:69:ae:a1:ce:a4:df:be:e6:7f:ba:9e:21:90:02:51:71:
d7:ae:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:55:46 2025 by rpki-client