Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: GB4+DDsVZmkjix5wd8ITZZ2gvm5P7DZedyKfFxGL254=
Subject key identifier: 92:FE:60:D3:CE:D4:77:7C:DE:C8:C2:C3:47:91:3C:A2:A5:BE:73:13
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 0199221E4096BF21666649BA9B31E246F4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: FRDAaKVtjAI8RT7KzQiHQRAioBlA86AzTHd7SWLrO5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:40:96:bf:21:66:66:49:ba:9b:31:e2:46:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=92fe60d3ced4777cdec8c2c347913ca2a5be7313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:d7:67:cc:0d:c9:30:ec:c8:ff:74:21:cd:
9b:49:35:05:99:ef:14:a2:af:f0:d3:8c:f8:43:50:
1c:78:c9:4c:66:8b:0a:39:94:cf:92:91:ae:78:3a:
c2:fb:a4:2f:03:9e:fe:78:7e:94:80:31:2f:13:5a:
f2:69:cd:f7:84:01:03:f2:29:f5:c6:8b:d3:18:0c:
ec:56:63:dc:03:a2:68:64:dd:e5:d2:df:a2:aa:56:
e9:ea:cf:b2:b7:99:1d:2f:b5:2a:4c:cc:dd:a0:99:
0f:da:9e:32:6d:fb:bc:c8:6e:3a:04:43:b5:73:ac:
cf:97:ef:d0:d8:c7:5a:ce:a4:0d:16:bd:bf:90:bd:
8e:de:13:d4:0c:d2:d8:af:9d:35:e5:da:70:ed:0d:
11:f1:ee:c3:41:cd:26:d2:7a:00:33:aa:ff:a1:2e:
6a:3d:19:78:91:cf:ac:3e:a8:02:e7:2c:3a:d7:3b:
4e:14:e3:ec:b3:04:28:4b:fb:1a:39:d8:cf:2b:a4:
d9:b0:34:ea:2c:29:82:af:3b:73:da:d4:1a:f4:b9:
e2:4a:d2:ab:c8:86:8c:72:af:31:47:dc:6a:f0:23:
b5:14:4f:d4:50:a0:00:d6:e6:7d:3a:d9:b0:b2:06:
9a:30:44:19:e3:2c:be:52:4a:67:c5:dc:e5:0d:0f:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:60:D3:CE:D4:77:7C:DE:C8:C2:C3:47:91:3C:A2:A5:BE:73:13
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:2c:27:d6:94:2b:44:7d:4b:3c:19:87:20:40:00:7f:8e:
9b:43:3a:b7:95:ca:26:e5:78:e8:67:56:51:1b:9b:76:a3:f5:
06:bf:e2:3b:dd:0b:10:d3:4b:ee:38:cb:75:32:4a:2b:6f:db:
0d:f4:b7:1a:a4:ae:20:b1:dc:78:a3:3c:75:67:0a:23:1d:ab:
a6:3e:1b:1e:83:64:04:f1:7f:0b:91:d9:28:ce:b7:aa:5f:fb:
d2:ff:c8:2d:5b:94:08:87:54:45:36:6e:56:61:45:54:3d:5f:
21:1a:c2:07:f0:99:44:36:08:24:6e:33:1b:ae:32:74:fe:24:
96:7b:c7:71:e2:c1:2d:93:8e:5c:fa:c2:41:05:45:66:76:8f:
ce:c1:79:52:a3:dd:72:f8:ee:5a:ae:de:45:59:93:e4:09:d1:
b1:ed:38:81:d1:e0:18:84:0b:eb:b5:cb:73:62:0e:08:f7:2c:
be:21:b3:f4:ca:e0:49:de:1d:4d:bc:f9:7b:d9:18:5f:04:44:
7c:cf:22:ff:55:cf:26:f0:b3:e0:e9:f8:02:eb:61:cb:2f:86:
67:14:d1:b3:07:ab:5d:cc:ea:e2:e6:7b:88:c8:1e:76:c3:d1:
69:c7:49:df:9f:5f:16:da:c8:04:3a:0d:f3:82:c5:8f:5f:c0:
82:5e:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:05 2025 by rpki-client