Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: L2D22+CDMNvFqig+ELMckrBUEGA+I+3Wy3H5l8R7DX0=
Subject key identifier: 6A:F7:29:D3:27:8E:3D:AD:DF:FA:0B:62:B9:85:FA:BC:4C:B5:36:6C
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 0199233130A37BCC53332742D1F51072B978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: hg2D7ydYVmFxxGa7A3++oo5sCtx8Wm1nMdwwRWkm5so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:30:a3:7b:cc:53:33:27:42:d1:f5:10:72:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=6af729d3278e3daddffa0b62b985fabc4cb5366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:b5:bb:33:2c:1f:89:f7:b1:5a:e6:b8:fa:
f4:fb:fc:47:d1:3e:ba:01:4a:f4:95:32:0b:9b:fa:
e2:a1:64:72:e6:b0:51:3e:e5:09:fd:46:3b:91:a6:
73:96:d9:27:bb:40:fa:d0:e2:dc:07:21:71:cc:e3:
2a:72:cc:97:6d:38:c6:50:f8:c8:49:31:84:8a:92:
48:57:d1:6c:af:46:c5:61:c1:61:00:91:97:52:c1:
d3:5e:37:ad:c4:e4:80:f3:3a:c8:ac:ca:c0:6b:53:
81:a2:da:e1:45:c9:80:2d:1b:5a:29:11:ed:8a:b7:
9c:ba:a7:f8:0b:fa:dd:ab:49:8f:69:80:e9:8c:2a:
7e:40:f5:bb:80:6d:0d:b9:74:5b:e9:03:be:bd:f4:
ab:7a:49:0f:bb:9a:ab:c8:e1:a8:df:08:d0:32:6d:
6d:8d:e8:be:b9:39:77:63:56:e7:dd:b3:79:c6:6b:
30:90:a4:06:c4:7a:e1:61:b8:10:c4:97:03:ed:7c:
6f:b8:5b:0e:84:b0:6a:3d:fb:aa:d5:5c:5f:17:aa:
fe:12:a7:15:00:e0:f1:97:d2:5e:64:6a:ad:55:5f:
d3:86:75:75:8f:b8:af:5d:45:d7:d2:1d:76:2a:78:
48:69:b5:d5:1f:a9:2c:e3:0b:ad:c3:0f:e2:de:fe:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:29:D3:27:8E:3D:AD:DF:FA:0B:62:B9:85:FA:BC:4C:B5:36:6C
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:06:e2:00:32:18:07:5f:1b:b3:b3:98:29:45:79:72:c3:
9a:34:5a:22:0f:b8:6c:95:a5:af:f4:ca:d2:a1:b3:df:a7:54:
cc:70:ff:32:6b:f3:5b:8b:f5:b7:2d:8f:0c:68:99:a9:57:0e:
8d:b4:65:6a:19:16:8e:49:26:25:90:81:30:f8:9e:0b:18:5c:
66:3f:58:de:24:59:e1:a7:26:d3:e5:4c:51:fa:25:fe:f5:95:
33:c3:ec:a1:7a:5c:b1:dd:f9:92:b7:6f:2c:da:7b:17:7e:1e:
2e:dd:e9:ce:b0:ce:e7:1d:67:ad:72:03:c4:72:af:5e:c2:3a:
21:75:12:85:5d:e4:5d:66:34:e7:95:04:42:d0:a9:5a:9f:5f:
fb:be:75:3f:37:56:e3:f5:b2:2d:0b:e9:18:4d:94:4c:3c:52:
be:96:df:db:11:a0:6d:d0:a5:39:09:ad:6e:0f:68:c6:63:8c:
b7:1e:49:e7:41:96:0c:7d:b9:75:97:79:44:25:1a:5c:b9:a9:
a4:f1:b5:1b:b5:b0:f8:eb:e9:d6:7b:03:70:16:55:b1:55:4e:
d8:60:27:61:0b:0f:b4:27:42:ed:08:99:1e:4f:56:c1:51:79:
30:c0:31:ec:ce:10:57:a8:57:0d:29:be:8c:14:b7:11:42:83:
d1:c2:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client