Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: mDtuNoZwerZgHrLpcVTfTzTMk84rvdbLY5Rd2BcTnFo=
Subject key identifier: BC:EE:0E:0C:DC:54:96:5B:55:7F:3D:84:DE:37:59:90:88:16:81:C3
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019954C2D0A222E5421CAD1FE70F71411107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 134E
Signing time: Tue 16 Sep 2025 23:01:17 +0000
Manifest this update: Tue 16 Sep 2025 23:01:17 +0000
Manifest next update: Wed 17 Sep 2025 23:01:17 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: NdedW13NhRF6HcrP2jDPP9EmibmaavSNPJVrbspe0rk=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:c2:d0:a2:22:e5:42:1c:ad:1f:e7:0f:71:41:11:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Sep 16 23:01:17 2025 GMT
Not After : Sep 17 23:01:17 2025 GMT
Subject: CN=bcee0e0cdc54965b557f3d84de375990881681c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:b8:80:9a:3b:31:8f:ba:30:8e:92:2d:92:
01:91:2b:9b:de:ab:8b:4c:31:e4:b5:42:f6:22:e7:
34:a1:89:13:6d:ec:de:af:97:bb:2b:f9:56:43:d2:
45:06:53:45:80:43:19:5d:98:7b:4f:1f:08:5f:a0:
8c:ef:03:ab:8e:f7:10:4f:e3:33:e2:88:42:42:47:
97:4e:98:7a:c0:52:67:26:e5:24:f7:3f:ab:f3:d7:
1b:48:2e:46:65:2e:1a:e7:bb:16:0e:2d:e3:01:89:
65:ae:96:f1:ad:b0:70:4d:04:3e:79:94:9e:9f:94:
66:45:20:53:de:c6:e2:b1:ef:c3:d0:d1:5f:5c:35:
3e:47:cb:84:3c:77:d1:f8:14:1a:21:3d:dc:f0:86:
16:a0:11:b5:30:13:e6:89:70:8f:80:7a:b6:a7:f1:
40:9b:38:22:b8:87:1b:4d:eb:e3:82:df:74:42:13:
9d:f8:85:83:3f:7a:f9:57:e6:72:f5:15:81:b8:fb:
3e:cb:8a:fa:c4:6f:58:3e:97:43:56:b6:b7:ee:f1:
7d:3e:e9:5f:c6:b7:f9:47:0e:7a:2a:87:3e:05:79:
1d:20:19:f4:f2:d8:ec:a8:16:87:82:5c:0b:12:a0:
91:1a:f7:3f:5c:ee:9d:c3:fb:e9:97:d0:8b:28:6d:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:0E:0C:DC:54:96:5B:55:7F:3D:84:DE:37:59:90:88:16:81:C3
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f5:3f:00:fc:2d:9d:0c:c2:bf:36:09:f1:8f:65:96:c7:31:
44:bd:c6:61:57:6c:64:82:b9:7c:20:80:fd:95:ee:2d:b5:eb:
5e:fc:17:ff:43:97:b7:bc:bd:2a:ea:47:2d:89:43:ca:65:e4:
c4:06:36:d3:66:e1:23:eb:7e:2d:e6:8c:75:68:6f:ef:91:e1:
01:8a:c1:d4:a5:1b:3d:b2:ae:b9:42:89:73:0f:4d:07:55:ad:
2f:f1:05:32:83:47:b5:54:9c:8b:73:66:d0:1c:bb:6e:ef:c4:
d1:6e:af:a2:5e:86:56:09:2b:84:83:e0:fb:80:43:44:1c:7e:
16:78:36:e4:b4:4b:2f:79:10:32:68:1f:15:36:77:0f:0b:3c:
cc:a5:51:e3:06:11:82:6d:67:73:71:03:f1:44:62:5a:38:ba:
22:1f:44:b8:9e:ee:62:18:f0:b7:2e:a9:a5:6c:61:89:3a:d5:
b8:46:7b:25:f7:1d:6d:ea:e1:4e:de:9b:4a:aa:89:d3:69:ad:
ac:f3:52:7c:75:2c:98:b9:89:93:c7:c1:ec:60:1a:a7:a7:96:
63:94:37:38:74:64:ad:58:64:e1:a5:67:9d:e8:d5:ce:6f:5c:
cc:34:4d:59:64:a4:c1:90:46:5b:9b:ae:f9:14:1f:e5:fe:1d:
2d:04:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:45:42 2025 by rpki-client