Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: FFW5hQqH+bwaK2zW/15RQuiUmUrDnw/D6x57QsWg6lU=
Subject key identifier: 69:9C:2D:35:EF:DA:EB:E9:3D:32:01:52:0B:37:02:6D:1F:A8:74:57
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 01992443E034819589BD41CA363D9D4FC117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 0494
Signing time: Sun 07 Sep 2025 13:00:51 +0000
Manifest this update: Sun 07 Sep 2025 13:00:51 +0000
Manifest next update: Mon 08 Sep 2025 13:00:51 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: sGT1qX53SXUwhayEshKsN5NWg0yqFtdm6V+TAORjzRg=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:e0:34:81:95:89:bd:41:ca:36:3d:9d:4f:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Sep 7 13:00:51 2025 GMT
Not After : Sep 8 13:00:51 2025 GMT
Subject: CN=699c2d35efdaebe93d3201520b37026d1fa87457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:5c:77:84:89:6e:d7:02:11:3c:3d:5d:a4:
a6:46:0c:93:81:50:2a:49:83:8a:a9:b5:0b:60:c7:
06:38:36:5b:50:5e:f1:01:46:af:09:7c:d1:ae:df:
ba:b9:f1:4e:b1:80:ee:77:f4:6b:5e:17:07:88:4f:
9f:83:d3:fe:16:df:55:8b:22:03:fe:85:68:87:85:
59:aa:a2:ad:6c:be:70:1b:0c:be:f2:b4:cb:65:13:
88:b9:31:3c:69:59:b0:30:e4:eb:29:40:9c:c9:e5:
e2:2f:8e:b5:a9:5d:8f:eb:fd:57:dd:95:3c:c7:79:
40:46:fa:96:c7:f4:b8:58:96:f9:1c:73:f1:47:ba:
d6:95:78:b8:3c:21:c3:09:38:5c:31:44:4b:31:38:
cc:ac:92:4e:76:00:bf:5a:24:14:8d:9e:8f:22:a2:
cb:42:81:49:6d:e8:e4:3d:77:1a:34:e6:c1:e6:ac:
76:17:a7:42:27:89:a9:50:ea:1f:57:d4:43:bf:70:
3d:eb:80:6b:98:b6:07:a3:62:d7:41:f9:08:ee:60:
23:ec:5e:dc:e2:42:a5:44:46:32:f1:92:81:e5:7c:
be:db:aa:19:de:54:4f:a8:5b:d5:a1:98:0c:45:dc:
84:39:72:89:66:d2:df:5f:05:ae:07:23:91:ca:15:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:2D:35:EF:DA:EB:E9:3D:32:01:52:0B:37:02:6D:1F:A8:74:57
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:d6:4d:9f:e4:6c:fa:76:8b:c7:cf:97:0f:2a:d3:11:9a:
da:d8:1b:07:96:63:42:a4:8c:cc:e9:ae:70:41:ce:05:c7:39:
ae:fd:12:c2:4d:a4:2e:6a:d0:67:ed:3b:c5:5a:ec:39:28:da:
21:f0:a5:bb:32:3e:db:1b:a7:fd:33:fd:7a:0a:5d:a0:c0:73:
a3:85:24:e9:41:8e:e3:00:fa:cd:ca:39:5f:9e:5e:51:c4:a5:
ce:be:1f:ce:ae:2a:4e:fd:34:80:2a:f0:d0:ed:3e:c2:77:46:
f4:ff:d1:67:e9:51:78:4c:15:d8:34:d6:6b:f9:93:cb:c3:aa:
a8:dc:79:8b:a1:c8:83:da:35:f7:af:0e:6e:90:7d:80:fe:a5:
da:cc:76:fb:74:f7:07:0a:c5:50:a5:1c:6d:57:56:f6:03:02:
a6:e9:b2:1e:3d:b9:67:b0:e5:c4:a9:74:2b:11:40:0a:77:e0:
e3:0d:11:a5:ce:dc:28:77:d3:1d:fa:b7:73:87:df:f6:6f:d0:
fc:0d:2d:3c:91:78:5e:eb:c5:fd:76:02:3d:1f:68:be:0e:08:
6b:bb:5a:21:6d:ae:a6:b0:03:93:21:65:6b:47:97:2b:95:b3:
ee:dd:b8:98:fe:40:ba:86:eb:3f:11:e2:be:3a:72:71:49:65:
c3:a4:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:07 2025 by rpki-client