Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: EDFzkQjBmFYhJMECnP5eoZ5NwoUlRZCs8CpXfhmMDLI=
Subject key identifier: DB:BC:28:F8:AE:2E:61:AF:33:77:6B:8E:18:A7:2F:6C:3D:47:0E:2E
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 01983428A5C232F181E42E9378CD2EFFF603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 01CB
Signing time: Tue 22 Jul 2025 22:02:15 +0000
Manifest this update: Tue 22 Jul 2025 22:02:15 +0000
Manifest next update: Wed 23 Jul 2025 22:02:15 +0000
Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: ABPo6w3kS2JEAz7mBuJIv5Z4cq1iiMF53ET+zTXGc70=)
2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:28:a5:c2:32:f1:81:e4:2e:93:78:cd:2e:ff:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jul 22 22:02:15 2025 GMT
Not After : Jul 23 22:02:15 2025 GMT
Subject: CN=dbbc28f8ae2e61af33776b8e18a72f6c3d470e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:0e:b3:a6:1d:a5:20:54:4c:d0:9d:89:73:
bd:9f:07:f9:61:65:3d:36:3e:f4:ce:ef:04:9f:80:
0f:5a:1e:70:b1:6a:27:9f:2d:8a:84:7b:af:ec:b9:
37:39:75:b3:f9:3d:9d:82:3e:42:1e:72:2f:b3:c2:
b0:af:a7:1c:22:80:a4:60:af:d7:b8:f8:f8:5b:fb:
5d:2c:07:0c:fb:8a:47:bc:47:1d:36:8c:df:a8:ce:
31:21:2c:e1:71:db:d4:f5:34:0b:57:cc:7f:a8:ab:
73:1d:60:e1:1f:ee:58:62:23:32:d0:47:83:82:05:
5d:15:9c:d0:71:ab:a0:8c:e7:37:72:7f:45:64:9f:
e2:fd:6b:df:4b:1b:cb:0a:51:4e:64:36:57:ea:b9:
66:13:ee:0a:c1:e3:76:35:7e:92:8f:9f:6b:9e:82:
e3:a1:bf:32:17:5b:93:b5:17:32:40:b3:f0:61:fe:
10:29:26:12:ab:cf:db:ce:a0:c8:b0:b2:70:60:71:
b6:ee:46:b3:82:f9:00:14:9f:c1:5b:ed:33:b4:d8:
05:31:18:e3:15:40:84:87:35:a6:cb:94:10:36:2e:
69:08:2d:0b:ab:38:7e:e6:3e:a6:78:0d:36:22:f8:
27:33:f7:56:a8:5b:43:04:a4:d7:33:2a:29:31:6f:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:28:F8:AE:2E:61:AF:33:77:6B:8E:18:A7:2F:6C:3D:47:0E:2E
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:fc:48:44:64:7a:a8:a8:b9:1e:81:29:75:73:58:7a:31:
0a:52:fc:69:fe:4a:a8:1e:6a:38:60:9e:1e:ca:09:61:d5:e8:
a5:1f:0a:d1:71:c9:52:07:66:e1:00:7f:57:38:bc:c6:56:98:
3d:6e:11:07:1e:3e:87:5b:d1:a8:a1:e3:c7:49:4a:c3:ad:68:
97:80:bc:53:0e:ce:b2:a0:10:bc:79:e4:6e:e8:57:c9:d9:31:
32:4b:ae:37:8f:f9:5a:70:43:c0:53:10:a6:cf:6f:df:27:cb:
12:e2:b7:ed:ef:4b:22:7b:fd:59:0f:74:f5:0b:33:b3:46:02:
8a:91:68:73:f2:6b:85:ea:9a:56:62:ca:8d:d6:f5:92:4e:3b:
37:66:41:45:c8:84:cc:0c:32:01:70:3e:32:f4:b5:0c:a8:45:
03:21:15:ed:8a:8e:b1:1e:b5:4c:77:90:91:92:63:ef:3a:1a:
36:88:87:c6:2f:84:0f:3b:4d:cb:77:07:f2:a0:55:e2:5a:ee:
ab:f5:42:a1:bc:a2:c6:a3:b4:bc:08:8e:c5:09:6a:99:94:71:
77:a0:98:bc:00:b2:f9:72:96:a9:09:60:98:04:3a:41:2d:bb:
45:a8:99:27:1d:2a:24:b7:e8:86:eb:47:ec:a7:b6:91:23:e3:
3d:4e:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:20:05 2025 by rpki-client