Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: Megm7XqUSALFPOVQ9ddmsuqnkVpNIcouYYEQqXy4QSc=
Subject key identifier: 08:61:1D:34:24:4A:BF:D4:59:F4:E1:83:D3:9E:F7:6F:09:9C:81:22
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0198C67F543B6E3A1ED7E8BA095743063617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 1641
Signing time: Wed 20 Aug 2025 08:01:29 +0000
Manifest this update: Wed 20 Aug 2025 08:01:29 +0000
Manifest next update: Thu 21 Aug 2025 08:01:29 +0000
Files and hashes: 1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: fgzCu+9nHK3I3LGpA4eXCif0WkBUiHlbghSbDaNmiII=)
4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:54:3b:6e:3a:1e:d7:e8:ba:09:57:43:06:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Aug 20 08:01:29 2025 GMT
Not After : Aug 21 08:01:29 2025 GMT
Subject: CN=08611d34244abfd459f4e183d39ef76f099c8122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:59:c8:80:c1:83:4a:85:8c:31:19:98:85:
3f:d1:af:9b:d5:6b:23:a3:29:b8:b3:b8:d0:ee:f6:
e9:d8:1d:2d:68:c4:de:3a:c5:f4:93:1e:0e:98:41:
ae:a9:9c:b9:51:8c:e7:a9:47:de:2a:a6:d9:99:8f:
18:5c:42:df:f9:81:27:06:7c:15:d6:b3:fc:64:96:
57:ab:ba:41:15:94:d9:b9:e2:e3:05:4e:17:40:42:
0c:ed:0c:62:cf:55:f9:a8:b4:7a:82:39:99:03:27:
6f:0b:cd:25:43:17:fe:68:c4:60:0b:ee:6f:a3:0c:
e3:a3:41:b5:78:05:62:95:d2:98:9f:d0:6a:50:b8:
cb:88:52:17:40:58:9a:3a:0d:ef:09:e0:37:27:0b:
bd:a1:2f:36:86:72:66:34:0f:2b:dd:31:d3:e3:2c:
4c:33:9e:29:b6:d6:de:8b:55:62:ff:15:a1:44:6f:
cb:a2:d8:d3:a0:85:cd:15:8b:03:11:45:ee:4e:3d:
b5:0e:56:26:8e:45:6e:87:54:c3:01:d2:4a:2c:ce:
cf:fa:fe:7f:42:27:35:b5:94:15:97:95:66:83:ba:
82:46:a2:e5:3c:b5:c6:da:d2:32:2c:11:27:f3:40:
f9:74:23:02:e5:f9:be:17:98:ce:8d:5c:04:01:62:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:1D:34:24:4A:BF:D4:59:F4:E1:83:D3:9E:F7:6F:09:9C:81:22
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8c:c2:79:e7:dc:38:49:f4:f4:e2:cc:09:85:f8:04:81:6e:
da:1f:4a:5e:ce:1a:a3:2c:0a:78:97:c8:65:a5:97:bd:b3:ec:
20:ba:c4:1b:1b:9b:ca:4a:99:a7:83:6a:81:7d:32:36:28:96:
cb:24:ed:89:06:ac:11:4e:88:e0:89:29:08:b0:fa:44:87:df:
e1:75:a8:1c:a4:4e:4d:b9:69:a4:ba:ff:a6:37:70:1f:bf:c1:
b3:d6:cf:27:c4:02:93:dd:af:b2:d4:00:8e:2f:9b:5e:93:87:
5c:54:2c:b3:da:15:5b:dd:e8:d8:73:2a:a2:36:ac:dd:8b:70:
73:7a:42:c2:e8:65:56:43:77:08:24:c1:67:6f:2e:7f:56:b5:
44:61:fe:0f:3e:53:e7:3e:20:aa:57:ee:8d:a9:b7:84:a6:91:
23:b1:c2:1a:ee:b9:08:3d:72:3c:05:f4:5b:74:5f:07:6e:99:
bd:ad:92:97:45:66:ba:c9:70:03:49:ac:aa:ab:b6:0a:ee:9a:
99:2c:c3:df:e8:4b:f9:fc:8b:08:fe:ca:25:0c:83:34:9e:e0:
dc:83:e6:de:1c:4f:f7:ff:6e:fd:63:2b:0e:5b:db:42:01:5f:
e5:70:fd:ce:cd:b8:69:e9:65:41:78:b1:be:39:d2:f7:6d:2b:
7f:32:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:14 2025 by rpki-client