Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: Q/hliwdlf/SE2rXOVNWlbrIvS2lsGav98lTApuEwc6Y=
Subject key identifier: 6B:E5:8E:B5:6E:C4:25:E8:AF:AC:E0:9C:0A:4D:7F:AB:55:A0:50:2E
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019936EFC8B3D146DF2560194900B9F57F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0E48
Signing time: Thu 11 Sep 2025 04:01:47 +0000
Manifest this update: Thu 11 Sep 2025 04:01:47 +0000
Manifest next update: Fri 12 Sep 2025 04:01:47 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: VvBSi9X2Q9Y9Wfz7IHZSYX3ugRetl1QQVmXQPTJmL+c=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:c8:b3:d1:46:df:25:60:19:49:00:b9:f5:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Sep 11 04:01:47 2025 GMT
Not After : Sep 12 04:01:47 2025 GMT
Subject: CN=6be58eb56ec425e8aface09c0a4d7fab55a0502e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:5c:df:6a:e8:2b:c6:27:24:be:32:43:48:
fc:95:4b:e7:12:1a:98:60:0b:0a:f8:59:ae:d6:93:
04:62:14:e4:43:8f:d6:26:6e:6f:cc:0a:74:14:7b:
3c:cd:78:d7:6e:cb:ec:32:f3:96:c3:79:cd:f5:dd:
1b:24:c4:af:81:04:f6:15:0c:43:bb:f8:25:69:da:
a1:a0:56:86:a4:3c:0c:c1:3a:4f:2e:13:dd:83:02:
b1:3b:e1:15:37:a7:8d:a7:e0:5b:1c:71:41:90:f2:
70:10:5e:fb:5a:46:5c:09:53:67:a7:dc:d6:cd:95:
db:73:67:09:27:20:ca:98:87:66:2f:1a:b8:43:7d:
e2:ba:bf:52:d5:e1:d2:f2:79:92:b1:c1:c8:85:5e:
0c:dd:62:a3:7d:b7:c5:37:74:2e:1c:47:c8:91:45:
f7:96:69:60:c5:4d:f2:d8:40:58:51:ff:7c:79:77:
a9:59:b3:d7:f5:5e:5b:c7:b8:6c:c8:d6:0f:2b:c5:
a2:85:ff:30:b5:4e:e5:52:e3:82:65:8b:29:8c:cf:
33:74:d3:0f:0b:bc:31:ec:1b:c1:48:56:ef:0c:c3:
53:32:2c:62:13:05:7f:75:ec:54:fc:61:a0:0f:25:
b5:29:f0:4e:3c:a0:19:66:94:7d:96:9a:05:f2:32:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:8E:B5:6E:C4:25:E8:AF:AC:E0:9C:0A:4D:7F:AB:55:A0:50:2E
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a5:19:ac:75:8e:86:03:3f:fb:b4:d4:17:e6:10:84:1c:e2:
78:b8:77:14:bc:34:2e:c8:88:cd:54:16:29:c6:09:99:94:44:
7e:a0:e7:a8:b6:14:02:5b:45:23:8c:2e:b9:37:60:5e:a7:cc:
6b:85:be:e9:d7:b6:60:14:92:45:ff:a4:fd:38:dd:f5:83:e7:
2d:8c:de:9f:b2:a5:f2:6d:25:09:a8:b6:52:76:f1:65:cc:bb:
62:3b:0f:10:dc:f0:05:ac:5f:9c:d0:99:32:1c:42:96:fa:fa:
3f:0c:aa:a3:c3:39:6c:28:1b:bd:e1:60:6a:8a:d6:58:1a:74:
16:87:e5:49:a4:22:a4:da:d8:cf:0f:a8:fe:26:96:ea:a5:bb:
b6:72:07:05:c1:84:e0:22:34:ce:fd:08:77:ea:31:01:07:f7:
21:83:3d:c1:b7:39:e0:b1:e0:2b:79:6c:f8:fd:0e:62:cc:5c:
a9:61:7d:77:0f:9d:ea:94:2e:b6:dc:b9:77:c5:29:6e:13:b7:
b1:f0:12:2a:84:55:b1:e8:c4:64:bb:5e:34:18:fb:8b:0a:b0:
c5:21:31:0f:47:4e:a2:9e:3a:ec:1b:22:be:90:bc:eb:0f:26:
52:7e:5f:62:58:dd:11:ea:23:db:49:6f:45:4b:92:6a:56:1c:
6c:18:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:13 2025 by rpki-client