Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: TvULGblGPxVVLBQgDQtLp4ADuBSvG0yrFJyFRDMXONM=
Subject key identifier: 4E:15:E9:32:E7:03:78:C0:CC:C7:7F:D2:E6:90:F8:07:5B:26:B5:B2
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 0199221EFCD242459DF3CA13369EDFD06366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 03:01:20 +0000
Manifest this update: Sun 07 Sep 2025 03:01:20 +0000
Manifest next update: Mon 08 Sep 2025 03:01:20 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: 8lzBpd1HeDXdhlOw4ccYFVBUBv2uX0RAvpDQNhBHOZY=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fc:d2:42:45:9d:f3:ca:13:36:9e:df:d0:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Sep 7 03:01:20 2025 GMT
Not After : Sep 8 03:01:20 2025 GMT
Subject: CN=4e15e932e70378c0ccc77fd2e690f8075b26b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:b6:f5:78:f2:0c:a3:65:07:a1:24:2d:8a:
0b:09:44:4f:12:31:d9:11:7a:e7:1e:ce:d3:ed:a4:
d8:0a:0c:b8:bc:d4:fd:a3:c5:f3:79:f4:4f:04:62:
c9:ae:df:53:51:68:0b:c2:e5:2f:1b:e2:fc:50:19:
d4:cb:1c:62:5b:fa:0d:65:65:eb:42:e0:95:93:e8:
2f:63:4f:f4:4d:b2:ce:8a:3b:f0:38:13:0c:14:50:
ad:6a:37:6f:a9:76:31:2d:af:17:4b:91:ce:e9:ff:
fc:29:cc:30:45:84:0c:5a:90:ed:69:d2:9f:88:62:
64:3b:08:8d:15:b8:30:01:93:5c:60:0b:13:db:d1:
84:90:13:ed:07:28:c8:89:33:88:e4:f7:55:a5:40:
db:be:0b:83:2e:a0:5a:7a:00:2f:96:73:01:40:bf:
bd:fe:c9:1f:fe:03:5f:ca:68:29:c7:45:94:58:65:
12:15:67:c5:ab:f3:51:c7:de:47:28:66:0a:3a:ea:
78:dd:1a:de:f8:29:36:41:7d:00:b4:7e:3e:7d:c7:
be:5f:3a:8d:32:5e:d7:8f:e9:00:5c:1f:23:db:d9:
47:6e:63:f4:f5:f5:95:1c:65:da:13:ad:68:58:ae:
3f:ca:c5:d0:6a:02:eb:1d:b4:d8:ef:96:be:46:cf:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:E9:32:E7:03:78:C0:CC:C7:7F:D2:E6:90:F8:07:5B:26:B5:B2
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:a8:e5:8c:1a:db:8d:16:2f:1e:44:76:08:9e:06:ce:86:
91:d5:3c:45:06:48:1d:fd:53:29:1e:d5:e6:f0:ca:91:6c:4c:
54:eb:e2:de:d1:43:9d:0f:fc:d6:63:69:0d:73:a1:b9:a5:ca:
39:63:26:da:fc:b1:62:94:72:f8:27:5f:08:56:6f:ff:79:02:
b6:50:8b:11:4a:43:72:d0:e4:b4:e0:b2:5e:d4:9c:86:7a:bf:
80:98:c0:53:cb:bf:cd:b2:04:d8:64:97:d3:2a:e0:cc:9a:4d:
57:74:c1:84:3d:19:8b:59:ba:0e:49:12:5a:62:01:4f:44:d8:
60:aa:dd:33:b1:37:5f:f8:8a:f1:dc:e8:d3:d3:0b:1d:ff:b1:
93:a2:32:9c:62:cb:58:0a:49:14:2b:bc:1f:aa:cb:83:45:03:
70:73:53:ed:d9:3e:17:8a:21:ef:28:ff:4f:8c:bf:01:51:eb:
51:27:4f:9b:82:bd:ca:63:f7:b0:35:0a:3f:66:ad:59:2e:8e:
d7:44:c1:47:11:97:80:91:be:52:ea:4d:9c:84:62:ff:98:7c:
21:3a:66:76:c8:18:43:ab:42:c3:47:03:39:7c:9c:52:d9:0e:
2c:bc:8f:6c:15:d9:9c:63:3f:f9:21:9e:3a:61:11:59:d0:cd:
aa:36:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:39 2025 by rpki-client