Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: ne6GR+s/ge7rJR0ka16xZxRq4CyB2zY9Fx+4v9/3xWg=
Subject key identifier: 7E:A5:52:CC:A7:26:F7:DD:F9:80:89:A2:D2:8E:8E:CA:48:F2:D9:2A
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 019938DDF1FDBD1D039E936C510BE19C5391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 13:01:33 +0000
Manifest this update: Thu 11 Sep 2025 13:01:33 +0000
Manifest next update: Fri 12 Sep 2025 13:01:33 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: WbotPUx6Qb9y9SXbqvsIj0sZA57AQfiAJNxZlS0kaio=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:dd:f1:fd:bd:1d:03:9e:93:6c:51:0b:e1:9c:53:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Sep 11 13:01:33 2025 GMT
Not After : Sep 12 13:01:33 2025 GMT
Subject: CN=7ea552cca726f7ddf98089a2d28e8eca48f2d92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:c5:fa:ee:f2:27:b9:c8:18:c0:fe:90:57:
a7:17:8e:13:5f:61:28:9b:21:99:3c:b5:c5:74:4f:
90:fc:cc:2f:34:ca:c9:e9:bd:0d:ce:18:08:6e:07:
a3:92:ab:ea:87:0d:07:71:5e:7d:87:9b:38:10:e4:
4b:bb:6c:bc:5e:0b:ba:83:66:dc:b4:96:2a:a1:9f:
e6:a0:d8:2e:1c:42:39:38:07:e0:17:53:35:aa:09:
de:7b:af:a1:ca:34:9c:45:a8:e1:5b:b0:92:95:c1:
1a:a7:43:61:92:fd:9c:c4:9c:87:fc:c0:bd:cb:f9:
36:49:86:b8:c7:39:d2:25:cb:f4:ab:08:9b:27:16:
e7:31:75:8a:8b:42:83:ad:0a:cd:65:53:6a:99:c0:
aa:01:88:18:fa:6c:5a:f8:87:38:03:c8:da:6f:42:
06:8e:76:a1:26:96:77:37:34:6f:7f:4b:e5:06:3d:
7f:4f:a0:cd:70:e5:b6:51:40:41:97:da:ff:a9:c5:
a7:29:36:f5:97:f0:d1:5a:17:47:53:a7:05:ec:ea:
b9:27:9c:ac:10:c7:27:d2:71:31:39:d8:9d:c4:90:
66:b7:b0:f3:14:33:36:b9:63:f2:9c:09:7e:f1:26:
83:bc:c8:b8:1a:4a:10:f0:31:a3:e7:f2:af:d8:4f:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:52:CC:A7:26:F7:DD:F9:80:89:A2:D2:8E:8E:CA:48:F2:D9:2A
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:f3:f3:78:ee:fb:7f:2e:c5:12:ef:4b:e6:83:9e:83:57:
95:49:b1:56:2a:61:51:32:87:11:f8:41:91:98:d6:b0:84:5c:
32:7f:42:f5:fe:50:5a:7c:c6:90:6a:e7:5f:40:8a:11:fa:eb:
63:c5:72:30:31:1e:18:9b:17:93:71:35:5b:44:17:2e:23:f0:
66:19:32:82:a7:b6:c3:e9:4c:38:f2:49:a9:81:03:63:f1:a8:
17:97:40:7f:54:15:8d:9e:60:74:5e:dd:4e:a9:2f:60:4a:2b:
49:fb:de:2b:3d:f4:29:af:21:f4:4d:e0:3c:bf:1d:65:77:97:
39:e3:d5:6c:6f:2f:3d:48:84:24:5b:e3:4f:43:da:8f:cb:a1:
21:d6:c9:5e:6e:b4:f4:6c:ab:b1:a0:8b:a0:bd:99:47:22:ca:
3a:5a:47:ff:9d:bd:70:d8:94:64:d7:39:c6:4f:db:8d:40:c7:
ab:58:c5:71:84:68:22:39:23:8f:9a:b1:8e:bb:df:8f:1f:fe:
48:0b:9b:ae:f9:2f:58:c4:45:3c:d2:c2:94:eb:d2:d2:76:b4:
94:df:19:79:51:79:5e:28:1a:6d:1e:a2:b0:55:e5:bc:df:0c:
40:38:71:a4:0f:69:51:4f:9c:dc:aa:26:01:53:ba:9d:cb:1a:
d4:bd:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:24:10 2025 by rpki-client