Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: 1uYTU4Hy3pji9ay/tMo0T4eLZS/Otujeupw5AlyMHMI=
Subject key identifier: C6:6F:ED:84:56:E2:58:04:08:72:A5:70:AD:62:70:F7:BE:4A:F5:26
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 0198C67F9844568A51A39CA5E938998B3FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0B5E
Signing time: Wed 20 Aug 2025 08:01:47 +0000
Manifest this update: Wed 20 Aug 2025 08:01:47 +0000
Manifest next update: Thu 21 Aug 2025 08:01:47 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: dZWMhkESnoa+3ba6BymhcOZBDrl5Y4eBLFJV8v2TZ3M=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:98:44:56:8a:51:a3:9c:a5:e9:38:99:8b:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Aug 20 08:01:47 2025 GMT
Not After : Aug 21 08:01:47 2025 GMT
Subject: CN=c66fed8456e258040872a570ad6270f7be4af526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:ed:65:85:85:60:d7:e7:c0:59:9e:d9:a9:
b8:92:9f:8f:61:2b:95:51:2d:51:22:08:8c:68:3a:
a6:b2:38:5c:f0:19:b4:9b:c9:2a:94:78:5a:e9:27:
5f:45:5e:48:c9:24:0e:25:b0:86:d5:6b:e6:40:08:
6c:c4:3e:9e:71:b6:85:80:2a:ef:5f:1b:40:f8:1f:
bb:60:9f:d7:6a:0c:5e:f6:29:b5:5f:93:db:41:44:
24:f8:c1:39:76:b9:50:bc:84:a0:53:f2:80:80:dc:
37:10:c1:58:1b:46:db:35:11:fd:16:fe:da:3c:47:
0a:d2:68:d5:89:55:51:22:4d:75:71:6b:5d:de:39:
4c:f2:39:bc:1f:4b:e4:55:fa:b0:48:7f:ae:88:c7:
2d:7e:32:f4:5a:0d:fe:62:52:72:93:a3:b0:d7:c0:
47:28:7d:f9:4e:b3:a4:97:72:0b:32:76:f6:a4:cc:
02:ac:cf:5d:53:98:1f:ee:83:54:51:ce:d8:fb:c3:
14:a1:47:a8:36:10:c0:c9:22:c3:05:f1:e9:66:04:
1c:58:a1:c3:84:1d:2a:25:e6:a5:da:f7:c2:be:fb:
cc:40:7b:46:9c:17:f4:fe:92:3f:70:19:ba:86:a4:
e3:8c:ff:4b:5b:df:69:79:13:34:6d:7b:7f:65:27:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:ED:84:56:E2:58:04:08:72:A5:70:AD:62:70:F7:BE:4A:F5:26
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cf:48:cf:20:17:af:18:d1:3a:7d:c9:90:64:cb:fa:98:cf:
70:0a:66:20:47:64:68:db:af:74:b9:d0:18:0c:1e:b4:dd:aa:
bd:cb:10:10:c6:af:ec:cd:c2:d3:d2:32:11:b2:b7:32:5d:97:
4e:96:e7:0d:b2:e3:05:20:21:1b:13:29:da:d9:1b:40:da:59:
58:44:db:4b:78:41:37:b5:7b:bd:38:55:05:b3:2f:25:2a:61:
ca:0a:a1:54:16:34:cb:ba:e7:3d:ec:61:18:d1:27:12:f3:20:
1a:6d:f3:9e:6c:44:c4:31:a0:c1:f2:c3:4d:f3:e5:73:98:19:
d7:9b:96:d5:bf:0f:08:b1:9f:e7:36:ab:d0:46:d9:54:64:5f:
81:1a:2f:e5:c8:cd:76:cc:0a:11:4f:f3:2e:f5:3c:17:c0:0d:
04:8f:5d:36:e8:a8:b1:76:79:6f:86:07:ba:38:22:35:78:3d:
42:fa:24:f6:ca:f4:0d:2f:6d:38:90:c2:6c:d1:81:2e:9b:f8:
5a:91:04:e1:a9:d0:f6:fa:1b:9b:c0:23:5b:aa:b7:d9:a6:78:
cc:5b:69:ce:84:ed:71:b7:ef:99:32:0c:93:b8:1c:fa:9e:a0:
d4:c1:6d:18:0c:d8:4c:99:4c:d3:00:d3:5d:d6:cd:80:d4:a4:
83:ad:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:15 2025 by rpki-client