Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: +8m7owlY/psb2+esGV+yrynDg7IOsu3lccsZ1VZljrk=
Subject key identifier: 89:34:38:B2:62:12:6A:05:E4:35:FC:5A:75:2E:05:75:A9:67:52:83
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0199323624C732B52B0D73A2C828C877CBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0777
Signing time: Wed 10 Sep 2025 06:00:33 +0000
Manifest this update: Wed 10 Sep 2025 06:00:33 +0000
Manifest next update: Thu 11 Sep 2025 06:00:33 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: BzXVL2/QAUBxn1Oe+A498ytnNewDPa/zXWM9JUBnvqo=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:24:c7:32:b5:2b:0d:73:a2:c8:28:c8:77:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Sep 10 06:00:33 2025 GMT
Not After : Sep 11 06:00:33 2025 GMT
Subject: CN=893438b262126a05e435fc5a752e0575a9675283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:23:18:59:f7:9c:0d:94:1a:93:4e:82:da:
af:11:a9:2a:b8:7f:b2:44:2a:3a:13:ff:ef:05:e5:
6b:da:7b:c5:b6:15:3e:4b:03:da:31:7d:da:aa:bc:
ce:69:d0:32:4d:56:82:51:aa:86:df:32:74:d4:25:
80:b1:ec:7d:8d:75:47:34:79:97:94:f3:7b:0c:b2:
b4:2d:41:a8:4f:ad:c8:d4:6f:67:ea:b4:28:83:67:
f7:49:94:7f:7f:73:88:0e:1d:d8:a8:28:48:f3:c5:
72:0b:ad:a7:02:1f:db:58:1c:94:40:38:4e:ef:68:
f6:34:c0:56:9d:8b:72:a0:2a:3d:c3:9a:c5:c8:35:
9e:5a:e4:94:64:96:cc:9f:91:a0:47:09:e0:13:34:
49:48:61:52:fc:6c:73:f0:42:37:6c:9b:cc:94:3e:
dc:cf:e9:ca:75:47:7c:5d:49:41:7a:cd:90:a0:ec:
cd:36:7e:75:ae:e1:ff:50:3c:ac:e1:c0:c7:32:b3:
8f:ae:76:e3:ee:81:b3:2e:73:90:1f:f7:8a:03:63:
ba:d3:9b:e9:23:e6:b1:61:ae:c5:fa:fe:26:2a:91:
23:81:93:17:6b:6a:90:5d:ce:ae:d4:dc:55:08:6b:
06:4d:73:11:12:89:c2:8d:54:11:f4:64:d7:f8:f0:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:34:38:B2:62:12:6A:05:E4:35:FC:5A:75:2E:05:75:A9:67:52:83
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:62:9c:06:cc:9f:7f:3d:f4:41:8c:fd:76:cf:44:d4:41:
9c:7b:f6:02:cc:a8:32:cd:4c:7d:90:ae:04:e6:78:51:50:93:
a0:77:60:26:11:e6:9a:97:b5:9e:09:29:df:59:2d:61:23:63:
69:35:c7:89:39:9e:06:ba:cf:86:29:d7:2a:90:5a:2e:43:e6:
a5:91:e2:14:86:c3:43:e4:68:80:65:2f:aa:7d:f2:08:29:e8:
21:1b:be:a2:48:e5:55:8b:b1:27:c0:90:5e:76:d8:1a:ab:75:
69:b9:57:11:ab:77:53:e6:d2:6b:02:8f:8e:e7:08:b0:c7:cd:
75:17:a3:de:14:68:5c:e0:16:31:11:c3:0c:b6:10:83:70:ba:
d4:00:8b:5c:9b:8f:06:b1:55:1c:e2:68:42:43:ca:0d:c9:9c:
a3:61:a6:7d:58:0b:80:88:99:6f:0d:ae:ef:ad:ce:f2:9a:98:
93:e8:51:c3:97:bc:a0:cf:1e:85:ff:a2:40:ee:72:6d:d4:5b:
5c:9f:db:e5:4e:bb:88:15:2c:4b:6f:0a:39:73:e9:70:68:89:
83:3a:31:e6:92:53:d5:4f:23:82:67:01:ab:01:48:99:d6:02:
7d:9f:88:5c:6b:2a:ce:19:5f:b7:b4:23:db:86:b2:8c:2d:74:
28:59:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:08:06 2025 by rpki-client