Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: ouoIocLhLwn5dVwj1z5JebAUDnl+CUwK/bKQkjgmpY4=
Subject key identifier: B0:10:E1:7A:A1:9F:E6:6A:F2:17:80:4E:91:9E:DA:44:34:17:79:24
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 01992BC68697A4FBDE3A120FF13F1EB13D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 00:00:54 +0000
Manifest this update: Tue 09 Sep 2025 00:00:54 +0000
Manifest next update: Wed 10 Sep 2025 00:00:54 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: 3iJCHaPWRCjQMMupZ5tfA7Y8PcsoxO4HntIs1ngfZIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:86:97:a4:fb:de:3a:12:0f:f1:3f:1e:b1:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Sep 9 00:00:54 2025 GMT
Not After : Sep 10 00:00:54 2025 GMT
Subject: CN=b010e17aa19fe66af217804e919eda4434177924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:fc:4c:91:65:61:ae:a2:ec:7c:43:5c:9e:
f6:77:78:88:8f:67:5f:c3:8f:33:37:93:f1:60:29:
24:53:93:66:d3:70:f5:ad:0d:14:ca:bb:cd:f0:24:
96:1a:af:77:c3:c2:96:53:8e:82:72:21:79:37:a5:
09:49:30:39:c0:6e:9a:84:b4:16:27:f5:73:fe:f3:
80:67:b5:55:40:00:27:e9:20:2e:29:96:fa:27:a5:
e6:5b:4c:f1:3d:ea:f8:21:8d:01:2a:4a:2c:df:81:
a6:e7:64:e4:4a:d2:22:e0:3a:d7:98:7d:c1:7b:30:
1f:10:db:22:f9:0d:3b:fa:64:d3:4f:f7:f8:4e:c3:
31:8f:72:06:12:ed:57:cd:2a:67:84:c1:8e:46:50:
5f:4e:7c:b4:46:bd:2e:aa:cd:79:56:46:54:33:b0:
ca:c6:21:fe:da:9f:00:f0:b2:66:1d:e4:d8:12:e5:
3f:c0:d5:57:b8:98:44:0e:57:7e:da:f4:89:8d:66:
a3:93:63:01:02:42:46:4c:d2:2f:22:88:cf:cd:f1:
5e:d8:7a:9f:2f:f6:2b:55:93:a2:08:90:f9:f1:47:
8c:49:2b:99:05:eb:79:11:84:e5:99:33:29:c2:56:
1b:d8:f6:7e:62:94:af:79:3b:74:04:16:2c:f9:4f:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:E1:7A:A1:9F:E6:6A:F2:17:80:4E:91:9E:DA:44:34:17:79:24
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b7:b3:ca:d3:ec:6b:68:48:70:cb:2c:6d:5c:71:f8:8b:8e:
9f:c4:9f:56:b1:37:1d:3d:0c:de:0c:d1:b2:bc:85:14:8c:d8:
31:93:b3:b8:e6:6d:d2:3d:d2:e4:69:73:7e:dd:f8:78:5d:b0:
a7:35:99:25:c0:27:92:19:46:e5:96:95:7d:d4:52:d1:ff:18:
3c:45:1f:91:98:69:34:4c:61:3b:dc:47:6d:25:3f:fb:1c:e1:
2c:47:3a:f4:61:9b:d9:e6:93:4f:13:90:e5:2f:0b:41:58:b2:
d2:ce:e7:84:64:7d:20:fe:4e:21:fd:79:d5:50:e5:42:34:7e:
e8:f5:74:f8:5a:af:c7:dc:30:37:26:11:94:5e:66:5b:44:1c:
12:01:d7:d7:bf:59:91:e9:45:9a:39:83:9f:b4:56:50:5c:4e:
be:35:75:2d:80:8f:39:a2:db:d5:36:3a:94:3d:12:55:f2:63:
c2:55:ed:8f:7e:a9:97:05:23:09:30:34:3a:50:16:ba:94:e6:
19:4e:80:db:6b:9d:6b:56:ff:d7:ee:20:6c:2b:25:cd:52:55:
2e:9d:13:71:7a:50:cd:35:d6:93:ab:63:e1:bb:2d:a1:ca:a2:
5b:79:65:43:ea:0d:c0:59:c2:ec:1d:b4:8a:f1:81:87:3c:9f:
4e:ff:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:13:31 2025 by rpki-client