Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: sHO/vFQa9JzHyX1DyyBcuBbQxbCrCS314NwUz9tzqW4=
Subject key identifier: FF:5D:29:35:20:78:A9:14:57:F5:EF:9A:FE:54:25:62:9A:5A:82:16
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019848899F137383EE57685D9E6BC67A9FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 09F9
Signing time: Sat 26 Jul 2025 21:00:35 +0000
Manifest this update: Sat 26 Jul 2025 21:00:35 +0000
Manifest next update: Sun 27 Jul 2025 21:00:35 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: hMOy+IwwleOgv5Y0AWfC257pKhmREes+mMuDlcTgbRU=)
2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:9f:13:73:83:ee:57:68:5d:9e:6b:c6:7a:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Jul 26 21:00:35 2025 GMT
Not After : Jul 27 21:00:35 2025 GMT
Subject: CN=ff5d29352078a91457f5ef9afe5425629a5a8216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:46:90:7b:03:0b:af:8a:a2:d7:ea:c0:b6:
0b:13:6e:4d:ca:81:3c:96:4a:b1:94:dc:62:6e:a0:
54:20:e5:d7:aa:7b:ac:a9:ef:de:c8:ad:99:8e:b5:
f3:32:c5:1f:b9:8f:78:7f:ad:ca:33:b7:df:64:f9:
ca:af:74:fb:2c:49:42:95:7c:70:b4:f8:7a:e0:80:
bd:da:d9:3b:9f:73:e4:ac:3a:b0:5a:8c:09:b5:25:
b6:72:06:71:d2:b2:7c:fb:09:b3:27:4b:da:c0:73:
d0:e2:20:d3:aa:f1:c5:92:6c:8f:d5:7c:60:03:f1:
5a:7e:e4:c8:d1:17:89:f2:e6:0b:41:6b:86:34:b6:
c5:47:8a:8d:6f:b0:b0:d0:8f:dd:6f:f4:e7:2a:74:
f3:f8:68:b0:5e:80:0e:53:8d:61:4c:18:b5:ce:30:
9e:06:b7:4e:62:12:ab:47:1f:cc:b5:73:97:17:e3:
67:ea:34:04:eb:b8:d7:5e:e9:f6:41:8d:d0:17:1c:
2e:78:47:19:85:76:8e:8e:32:6c:a9:d2:ea:c9:93:
e6:15:63:98:41:f9:41:05:75:24:77:d3:8c:83:fd:
e3:04:b4:6f:f8:32:e2:0d:8c:2e:27:46:97:3d:ab:
02:e8:54:d1:95:8f:ef:f4:83:4c:89:d0:8a:56:11:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:29:35:20:78:A9:14:57:F5:EF:9A:FE:54:25:62:9A:5A:82:16
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:49:d3:c0:ca:a5:11:2a:36:b1:0b:5f:f8:63:05:6a:7b:e8:
8f:f4:ed:7b:67:3d:3c:3d:a7:41:f2:71:6b:26:f4:cf:a7:b5:
48:80:8b:54:03:37:fa:ad:29:06:a5:6d:95:aa:8d:71:a7:71:
54:23:fd:b2:04:4b:a0:be:f6:6e:b6:68:6e:3d:5e:ce:89:f0:
6c:ec:6a:ec:12:ea:55:fd:47:90:cb:1d:60:fa:12:dc:02:61:
dc:ff:60:7a:6a:58:e7:00:e8:c6:4e:75:fa:34:df:e5:6d:c9:
29:c7:38:0a:70:60:da:fe:b9:a7:46:da:d5:02:23:b9:67:8a:
6d:7f:08:e4:e1:eb:1f:bb:f8:d9:5e:9c:ae:79:a0:a9:cd:98:
96:1a:a8:38:82:55:3f:84:92:72:af:32:7b:b7:2d:a6:7f:0a:
f5:ca:14:71:f1:6e:cb:d0:4e:37:c9:c3:58:83:5b:43:2c:88:
d9:e1:cc:6d:41:a6:d8:49:c5:93:67:d7:ba:a7:c4:96:77:24:
36:99:7b:c2:02:5b:e3:09:11:7a:2e:74:fa:3b:f7:54:f8:c1:
36:19:37:e2:37:51:21:45:a9:11:48:d2:d9:b7:fd:5b:19:16:
30:e6:c3:ef:a1:13:aa:b6:92:12:aa:2e:56:d9:75:f9:32:e1:
f2:ba:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:44:19 2025 by rpki-client