Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: whI7xtDTOza71vA/5eUQ+9EKwNO4YDNhAawLXzcccAA=
Subject key identifier: 7A:E7:2D:B5:86:8B:DC:BE:DC:6B:C0:4A:E4:6C:49:3D:91:D1:AB:73
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019826D93DAD33D169AC1B7F11B751591832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 06D4
Signing time: Sun 20 Jul 2025 08:00:27 +0000
Manifest this update: Sun 20 Jul 2025 08:00:27 +0000
Manifest next update: Mon 21 Jul 2025 08:00:27 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: CtnMj9xSDG7E1o0JwXQKpH6tTfKbdgDXqjVIX2ZLlfc=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:3d:ad:33:d1:69:ac:1b:7f:11:b7:51:59:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Jul 20 08:00:27 2025 GMT
Not After : Jul 21 08:00:27 2025 GMT
Subject: CN=7ae72db5868bdcbedc6bc04ae46c493d91d1ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:e7:89:23:ff:95:f1:cf:97:76:66:20:b6:
3a:88:be:b7:84:f7:7c:10:90:46:3c:e0:e8:fe:db:
c8:c5:1a:cc:03:35:e5:c0:db:da:4a:b9:c2:0c:b8:
eb:1d:4c:84:33:45:68:21:86:b0:0b:8c:d1:89:c5:
0f:2c:bd:da:75:2d:75:2a:56:b4:23:f1:3a:bd:3e:
e5:d9:b5:60:f3:0e:77:03:4c:a4:2f:75:9f:13:49:
45:50:bd:63:85:71:4f:a1:04:8e:b2:67:4f:e9:b2:
de:eb:57:08:e9:9e:7a:3c:cf:80:20:0e:b4:75:90:
c2:49:78:cd:66:d2:e5:ac:77:95:9f:69:0b:ac:1d:
d2:d8:ec:66:cb:53:f9:f8:8c:a2:3e:bf:aa:c6:8e:
1d:03:28:98:c6:23:81:92:4f:31:e1:a7:4a:4e:f5:
42:c1:15:b3:c6:d4:5c:c5:c2:81:61:cf:a9:9a:bf:
fa:9d:8c:be:59:a4:be:96:e3:52:42:ff:f5:b1:48:
29:9c:68:39:bb:8f:59:c0:44:dc:2b:c2:c1:24:41:
89:f6:3f:17:9a:ca:be:c7:d5:14:cc:97:90:24:36:
9e:4e:41:ac:07:ce:12:29:63:b1:99:a4:29:5e:ce:
c0:8e:e2:92:77:69:60:f3:9e:62:c8:41:5e:a3:4d:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:2D:B5:86:8B:DC:BE:DC:6B:C0:4A:E4:6C:49:3D:91:D1:AB:73
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:6c:05:5c:7e:e3:16:70:38:75:b5:16:bb:03:4e:f4:85:
9f:d7:44:e4:0b:ef:63:69:05:51:87:bc:b8:a3:5e:2b:e0:7b:
9c:11:06:a3:6f:09:0c:ab:ac:26:dc:29:04:7f:94:8b:f6:4d:
03:c7:b6:f0:bd:cc:ec:89:92:dc:69:40:d3:eb:de:32:65:77:
03:1c:13:64:09:d6:05:69:2c:3c:07:e7:da:39:fa:44:ec:12:
fe:e3:a8:43:b0:a6:0e:ce:db:cb:97:62:a8:ee:4c:a8:60:d5:
4e:74:5a:3d:45:d1:26:7e:99:b6:98:57:1d:d5:ce:88:97:bf:
78:77:1e:1e:d5:32:29:20:50:30:6d:a9:c5:47:22:9f:18:6f:
4e:3a:0c:4a:58:aa:61:32:a8:ff:c5:36:35:95:bc:4d:86:3e:
18:e8:97:ec:36:d6:78:cf:6b:23:93:b9:76:f9:50:14:09:d3:
14:3f:13:d6:8b:cb:22:46:33:74:43:91:ba:f5:b7:d2:f3:f7:
ef:6b:ae:86:99:97:17:c9:11:64:e1:41:3b:72:0e:62:d1:d0:
8f:79:5a:cb:0e:d4:12:d9:04:e9:7c:06:8b:54:f2:43:f4:6e:
03:91:8d:84:5c:a6:8b:0e:2d:f6:ac:09:de:68:fe:62:18:e8:
e1:6c:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:50 2025 by rpki-client