Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: W3445dRY0QjhU+SH3Nz3WeWA7cC1KpxO3rrURMmlSN4=
Subject key identifier: 91:2D:A0:A5:DF:00:DF:52:D4:2E:3F:88:06:37:FF:ED:51:5D:76:F8
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019922FA89303F48B3D3AFFE29154240B109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:08 +0000
Manifest this update: Sun 07 Sep 2025 07:01:08 +0000
Manifest next update: Mon 08 Sep 2025 07:01:08 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: IbcswinC5AhbkVZN4bfAc86IUf16viQlblUahLWMSQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:89:30:3f:48:b3:d3:af:fe:29:15:42:40:b1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Sep 7 07:01:08 2025 GMT
Not After : Sep 8 07:01:08 2025 GMT
Subject: CN=912da0a5df00df52d42e3f880637ffed515d76f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d9:3f:38:a4:76:81:ea:84:7f:7c:03:0d:3e:
84:3d:31:d3:c8:6e:c3:69:ce:99:b5:d0:6c:b0:07:
12:d4:8a:b8:98:fe:11:5c:fe:58:3e:0f:16:17:f1:
81:5a:4d:e7:47:97:f0:8e:ff:47:db:bc:e2:a6:33:
9e:bb:a9:d7:7b:21:6d:44:8c:e2:24:5e:ff:3f:ac:
cf:67:ff:c0:48:1c:6c:22:a9:03:e1:78:61:69:23:
a9:95:d6:58:fe:12:1e:b1:f4:9f:30:be:71:55:84:
ec:d1:c7:a2:7a:b5:d9:5d:be:d8:85:1f:d5:20:b5:
b2:c3:f3:09:96:16:f9:78:64:f6:71:9f:7d:b2:58:
31:ad:70:06:fd:3b:12:9d:8f:a7:04:66:47:de:f2:
56:f0:97:59:5d:c0:1c:ae:31:72:52:03:7c:5d:0d:
1b:f9:ac:0b:d0:f1:0c:e5:4f:18:9e:1f:d7:75:5b:
0b:53:df:09:86:0d:d3:30:38:3f:cc:6b:30:9e:5c:
10:d6:a0:20:69:f8:79:fb:27:a3:07:0f:da:a7:15:
0c:3c:d7:95:ab:5e:c5:7f:2b:43:5d:a1:d4:49:b9:
5c:e1:2a:07:6f:0d:8a:3d:8b:49:22:fa:09:61:16:
f1:31:3a:41:3e:48:3b:bb:53:db:2f:62:3c:96:fb:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:A0:A5:DF:00:DF:52:D4:2E:3F:88:06:37:FF:ED:51:5D:76:F8
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:71:ce:d9:7b:07:77:d8:4e:2e:29:bb:b0:2a:a0:7a:b6:
b5:3d:ee:14:ae:9f:39:e2:00:02:54:3b:d5:dd:5a:94:5d:cf:
09:f8:b7:a8:d5:a6:ff:09:fb:64:92:39:6f:11:7c:e9:42:0a:
ac:6e:b0:f8:02:b3:4f:3f:f4:f3:56:03:df:d8:ac:4c:b4:61:
93:6d:57:fb:f8:4e:65:89:c4:d6:05:a5:06:d0:48:e2:08:b2:
bd:38:0e:39:1b:c3:c9:5a:d0:a8:fc:e7:f0:f5:54:b8:a7:f9:
c5:4b:87:54:89:5a:0f:9e:91:43:65:7f:6d:13:18:45:d0:47:
0f:3f:50:d9:4a:cf:64:d2:c2:a8:11:a3:cb:b3:e1:38:37:39:
7d:42:d9:58:85:86:76:f3:cf:25:0d:ec:10:6b:27:b3:8b:b7:
d9:ed:35:cd:95:6b:b8:ff:97:be:ff:90:58:d7:d3:d4:86:67:
65:c0:8a:7c:80:14:55:19:47:5e:93:14:a6:82:d7:6a:1f:89:
d2:e5:b8:04:3a:b0:ac:0d:0b:8c:d8:52:07:91:9e:5b:b4:a9:
07:0e:5d:09:c3:d4:a4:8b:07:0a:cd:79:f1:1a:ec:81:12:11:
0b:f9:19:37:f5:af:1e:e1:a6:11:90:d6:61:c5:f0:88:67:72:
66:cf:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:12 2025 by rpki-client