Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: hHqGZEhMNpLkFQYOlKluTg3/xjQxPZ7zMVI98zhI8x4=
Subject key identifier: 7C:64:3F:B7:70:1F:5A:24:89:89:B9:42:5C:EA:3C:B0:7F:3B:0F:00
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019921E7723D920DB4C4022C51B69B6B4E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:40 +0000
Manifest this update: Sun 07 Sep 2025 02:00:40 +0000
Manifest next update: Mon 08 Sep 2025 02:00:40 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: Z6IYxjXtivLA2kV9ipf1bBRISobO5fS3jyLCjazoArE=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:72:3d:92:0d:b4:c4:02:2c:51:b6:9b:6b:4e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Sep 7 02:00:40 2025 GMT
Not After : Sep 8 02:00:40 2025 GMT
Subject: CN=7c643fb7701f5a248989b9425cea3cb07f3b0f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:38:3d:85:37:53:16:92:69:9c:3a:51:9e:
1e:4d:db:8e:e5:24:50:d3:34:76:6f:e2:3c:5a:50:
c7:60:bb:3c:32:41:3b:6c:a2:7e:fe:79:df:c7:95:
b9:85:c6:56:5c:ae:8c:a7:ac:40:eb:ca:cf:51:3e:
83:1c:38:67:0c:42:99:93:06:c3:40:82:0e:1b:11:
db:22:b6:4f:97:76:16:de:c3:53:e6:48:ce:0d:52:
b4:aa:72:42:e2:4e:ba:9f:f8:d6:a8:ff:f6:be:50:
eb:e8:0c:8e:11:9e:e7:20:4a:91:fb:65:60:8b:83:
94:78:b1:1e:b1:19:52:4d:fb:f3:9e:bb:d8:89:93:
72:c6:d4:7e:27:fd:46:01:80:0b:69:dc:02:76:3e:
b7:40:d3:38:f7:40:ba:46:78:75:db:e1:d5:6b:cb:
8b:40:97:bd:56:6c:8e:c9:fb:d1:d3:e3:a6:70:fb:
f6:2b:96:c0:4b:f7:19:ce:88:f4:e0:06:8c:0f:17:
91:93:bb:6a:da:5c:04:87:96:10:7f:a8:ab:63:3a:
75:20:ca:55:17:92:0f:af:df:4b:e7:86:03:6c:40:
52:15:5d:ee:99:f6:30:b1:d9:2d:12:bf:84:fa:ef:
59:6e:e7:ae:dc:26:d9:dc:83:09:ff:ce:6f:f6:35:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:3F:B7:70:1F:5A:24:89:89:B9:42:5C:EA:3C:B0:7F:3B:0F:00
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:28:2a:c7:0d:70:ac:30:3d:9c:09:d2:6d:9f:20:65:a6:
c2:65:81:42:28:36:30:48:fe:ed:dc:78:00:ad:eb:f9:12:d7:
bf:46:a6:ab:cc:97:1d:15:b1:8d:7e:40:73:06:a9:40:f7:89:
d7:ee:f1:e9:41:f6:48:7e:5a:b7:0b:16:3c:fe:6f:f1:3b:5f:
19:73:43:27:07:eb:76:80:3b:8d:16:22:37:24:b7:bc:d4:24:
de:dc:7c:d0:dc:f1:08:ff:3d:e2:59:c3:bf:dd:21:5f:c5:d4:
99:6a:c5:b5:ca:99:4a:c1:47:34:8b:d2:26:b9:a2:69:e0:70:
56:a9:e4:19:e3:ba:a7:f2:1c:d1:4d:95:a2:36:ed:25:35:71:
d3:a5:c0:1e:ae:84:c8:a1:86:34:7e:61:67:09:dd:2a:04:8d:
76:05:fb:17:32:9f:de:e2:fa:12:b3:85:b1:73:b8:3c:ff:ed:
68:e6:32:89:73:71:6d:94:e2:a2:05:0e:d1:f1:44:ed:58:77:
ce:ce:3b:f9:6d:05:08:15:33:3f:d3:44:17:97:cb:73:8e:b3:
14:69:53:6a:20:6c:dc:02:12:82:31:bd:71:e0:5d:a8:9b:f0:
f2:bc:4d:aa:3a:bb:b2:95:64:b8:76:ef:ec:63:e9:5d:cd:ec:
4f:c9:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:32 2025 by rpki-client