Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: 10op1kMKgVNsXfah83TE1B9KNr6OtfSOK4UadaOzxqA=
Subject key identifier: 67:4C:40:58:04:FD:C7:E4:D4:3D:47:AD:9F:27:68:EE:23:D6:81:A4
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019921B052CB2D2AAF433D044D98A9065E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0F0D
Signing time: Sun 07 Sep 2025 01:00:27 +0000
Manifest this update: Sun 07 Sep 2025 01:00:27 +0000
Manifest next update: Mon 08 Sep 2025 01:00:27 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: 9SC9JgFzX9xuWKQA1o9Otfw4UFk8dY7OgXrMQNKyv3E=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:52:cb:2d:2a:af:43:3d:04:4d:98:a9:06:5e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Sep 7 01:00:27 2025 GMT
Not After : Sep 8 01:00:27 2025 GMT
Subject: CN=674c405804fdc7e4d43d47ad9f2768ee23d681a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:ae:d5:53:c0:13:97:05:d2:37:12:b0:34:
7a:27:a0:dc:26:c0:63:4f:2f:7d:4d:df:53:c8:fc:
e1:e7:8b:f3:ad:9e:23:1b:25:b2:d4:b1:93:0a:23:
3f:1a:ce:8b:7c:8c:52:e7:a3:b7:94:cc:fa:48:af:
72:3c:93:16:b0:68:25:42:70:c9:99:29:b5:73:41:
4b:db:50:76:30:be:af:5a:56:e7:91:b9:07:40:3d:
44:a4:e3:5d:8a:c8:ee:11:a8:99:9b:a5:46:11:26:
bb:d1:4d:cf:82:12:53:9e:90:ac:d7:0b:b4:c3:58:
54:2b:c7:cb:d2:47:01:f7:31:af:ff:cf:6b:44:0b:
51:62:f2:4a:35:54:b8:15:af:46:8e:d1:9f:19:32:
f6:cb:4a:37:98:9c:16:66:76:39:68:8a:ea:d2:de:
82:a1:32:d3:c9:3a:bb:75:37:28:94:8e:0f:6c:44:
34:ba:14:9f:9d:bd:07:7a:a6:c4:5c:22:da:4a:62:
0d:34:8b:3a:0c:69:ee:04:61:3a:3d:63:33:ec:bb:
91:af:5c:60:32:72:55:97:26:fa:06:a6:9e:13:f6:
7e:79:f3:ee:9e:e6:65:f2:52:b4:fa:d8:e5:07:45:
6e:57:24:ad:c1:46:f8:55:e0:c5:30:6d:03:57:3a:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4C:40:58:04:FD:C7:E4:D4:3D:47:AD:9F:27:68:EE:23:D6:81:A4
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e1:e8:53:4a:e6:71:2d:94:4a:3b:56:e3:19:ba:37:07:06:
54:dc:74:d6:14:85:57:7a:ca:e4:2d:c3:2f:0f:b1:37:4d:4e:
df:db:a8:44:9a:a2:b4:ef:c5:2e:f6:58:56:8b:fa:c2:ee:8f:
f9:f1:08:b9:bc:c6:03:d6:71:c9:bd:4a:55:7a:13:a9:99:20:
55:02:c3:44:96:25:64:c5:89:35:68:b1:a7:e0:73:5e:78:dc:
de:13:4e:ff:cd:06:c6:b3:02:67:1d:45:38:63:d0:00:5a:f0:
02:18:11:d6:97:0c:3a:75:2b:46:11:97:90:1d:7e:58:f0:f7:
41:8a:f3:e5:e8:7d:46:db:aa:ee:50:08:3c:a4:4c:bd:fc:21:
43:60:7d:fc:0e:79:a5:b0:13:79:bf:90:31:58:c4:4a:35:df:
36:71:c6:70:74:eb:1e:00:74:be:e2:db:92:95:f4:b9:21:c8:
42:04:96:9a:b6:4d:8c:ed:86:9d:5c:6e:7a:62:40:f0:56:9c:
ac:a3:45:8e:27:61:e6:c8:8a:c4:70:97:4a:4e:3d:c1:e9:d8:
91:ba:0c:0e:05:c2:f3:05:b7:e5:f6:a4:eb:f6:96:98:98:3d:
2b:1a:51:91:0a:61:a3:7a:e8:44:30:3d:70:4c:90:5b:66:09:
52:7a:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:38 2025 by rpki-client