Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: Mn6MCzepcGesZNhaBNSHr2msjZgXblAriu5ofAwyKF0=
Subject key identifier: 2F:73:1E:6E:BA:BA:08:55:82:CA:9E:0A:76:59:79:E5:82:36:B5:E3
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0199326DA702D79EFC5EC0F6CA1D23501210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0F75
Signing time: Wed 10 Sep 2025 07:01:10 +0000
Manifest this update: Wed 10 Sep 2025 07:01:10 +0000
Manifest next update: Thu 11 Sep 2025 07:01:10 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: M3tRavwjNkcER9B9h7aSUDjgpfJuOSmLkA1bXV9m/sY=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:a7:02:d7:9e:fc:5e:c0:f6:ca:1d:23:50:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Sep 10 07:01:10 2025 GMT
Not After : Sep 11 07:01:10 2025 GMT
Subject: CN=2f731e6ebaba085582ca9e0a765979e58236b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:2c:c8:59:e9:1c:d9:ad:1c:92:f5:48:80:
1f:8b:9d:8d:b1:af:45:dd:ab:8d:6b:3c:c9:cd:dd:
c2:19:2a:ac:22:ea:65:3a:d7:88:78:43:6c:35:ff:
d8:28:a8:60:8c:03:fb:a9:78:89:53:0c:3f:81:bb:
6e:c4:ba:6a:f8:9b:53:03:71:8f:8e:e4:aa:8b:7e:
f0:e5:a4:39:1e:20:3b:cf:9d:c4:9c:26:3a:ed:63:
be:bb:79:79:1a:c3:24:da:d5:fc:e9:65:70:e2:3b:
f9:46:16:b7:ce:38:18:4e:bd:38:a3:82:50:a2:7b:
2a:de:24:db:90:d8:6a:21:e8:71:e3:22:dc:e1:31:
49:42:d3:cb:84:58:fc:a5:84:a1:05:ab:77:4b:9c:
66:57:68:c2:db:f7:a8:e8:31:dc:2e:94:a9:eb:f7:
7b:7c:e9:e1:7b:a8:09:cd:0b:e8:87:6b:2a:da:c6:
68:a5:d1:1a:95:52:e0:aa:ff:ad:3b:33:fd:3d:02:
a2:6d:6d:4d:2f:dd:c5:02:98:39:36:21:00:c5:c5:
2c:e2:24:71:00:04:2d:2a:0c:1a:80:6e:80:17:f3:
91:b1:3b:cb:43:6a:ac:6f:86:8e:6d:08:cc:82:80:
95:80:ed:a0:27:c0:63:c2:f0:64:a5:68:7e:8d:bd:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:73:1E:6E:BA:BA:08:55:82:CA:9E:0A:76:59:79:E5:82:36:B5:E3
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:af:0f:f0:8d:da:74:6b:06:61:7b:de:45:fb:b9:64:8a:
2f:21:72:38:57:9b:c4:39:62:de:cf:f0:2d:08:e4:63:23:24:
84:8e:57:94:7b:e9:55:cc:a3:1a:c2:8b:01:1d:54:c8:45:a6:
74:62:10:bd:36:a4:dd:d4:4b:7e:00:42:c5:25:5e:0f:0f:cb:
ed:14:22:08:48:bb:bb:5e:90:32:15:44:fa:ae:68:2e:30:f6:
a6:2d:68:6a:08:76:f2:29:f8:68:95:b3:d4:e8:8e:6f:52:ba:
46:2a:a3:bb:b2:c5:c0:bd:50:8f:e1:56:a4:6a:0f:7b:6e:ab:
97:cd:5d:95:71:4f:45:22:2c:98:ab:44:e8:0b:5a:97:77:41:
79:84:f3:67:35:b4:97:0a:56:ec:d9:b6:be:bd:77:40:2c:bd:
eb:7f:9c:da:1d:bb:23:76:eb:f8:55:a4:05:96:68:9d:82:38:
e6:45:85:d8:ab:57:d8:ed:15:58:17:49:28:35:e5:49:ae:1c:
32:16:3a:42:ac:ac:bd:11:18:42:a0:6f:80:8d:89:bc:79:3e:
98:7d:42:fd:2b:9a:b7:15:65:f4:da:d9:fe:2f:1f:e7:32:5d:
8b:da:67:d8:71:ad:53:9b:60:4e:1c:b4:54:a4:0b:3c:b7:b6:
80:9b:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:12:19 2025 by rpki-client