Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: AqAkaKCq4EzVco4tztltJ6aiGG6L2Z1L30jwiutNLrg=
Subject key identifier: C7:82:A4:E6:F6:37:AE:53:B3:D3:5F:52:47:59:F1:6E:06:3B:B5:0B
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 0199183FEAAA0823DDC33B79F0240907C52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0751
Signing time: Fri 05 Sep 2025 05:01:05 +0000
Manifest this update: Fri 05 Sep 2025 05:01:05 +0000
Manifest next update: Sat 06 Sep 2025 05:01:05 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: DcU//LnpX13JzKM/QsTPN279VWaRgdjKK/d0YhUtbAo=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:ea:aa:08:23:dd:c3:3b:79:f0:24:09:07:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Sep 5 05:01:05 2025 GMT
Not After : Sep 6 05:01:05 2025 GMT
Subject: CN=c782a4e6f637ae53b3d35f524759f16e063bb50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:1c:a0:e3:db:e3:fe:f0:d3:9a:34:3b:b4:
37:cb:f6:26:57:e1:cf:fe:7d:f4:6b:14:d7:b6:8d:
34:3c:5c:d8:d3:0f:54:98:6c:35:6c:22:42:70:57:
a0:97:be:8e:20:d8:0e:11:5a:71:e4:96:ac:61:eb:
d7:42:37:36:f9:e0:c6:86:52:3f:55:0d:c8:07:aa:
f6:28:92:bd:1c:0b:a2:f5:24:ad:37:40:85:ca:a0:
ee:27:03:c9:57:1c:55:d8:08:c5:fd:35:b5:c0:9b:
75:7f:cb:8f:48:d2:4e:26:2e:9b:83:b1:06:bf:7b:
44:8a:14:11:08:33:8d:6e:37:a5:00:c5:b6:12:0f:
cf:be:db:66:a1:5d:6e:09:1b:78:0a:b1:18:df:f4:
56:90:07:7d:3a:6b:16:d4:3d:48:42:04:88:14:c3:
db:ab:38:7e:2a:95:20:8d:6f:9b:ff:ee:18:f3:0d:
40:1c:ed:71:ef:eb:fb:22:79:83:54:99:44:b5:0e:
27:5e:db:26:2b:90:ab:41:01:22:ec:af:b4:72:8b:
1f:b7:70:55:58:21:18:18:42:a8:dd:22:71:2c:2e:
0c:9d:df:92:89:cb:85:d1:3e:64:a8:62:e3:25:37:
ad:b6:76:23:43:63:0f:a8:3e:88:0b:92:b2:fc:97:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:A4:E6:F6:37:AE:53:B3:D3:5F:52:47:59:F1:6E:06:3B:B5:0B
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:33:42:99:13:d8:ad:f7:8b:a1:6f:d5:0b:b8:6a:48:89:
8b:4d:e0:64:2c:51:38:48:a8:69:94:b9:d3:2f:dc:ef:fd:bd:
16:e2:9b:92:1f:0d:aa:8f:95:1e:bc:2d:74:34:95:ee:cd:43:
b4:45:80:b4:17:c6:3d:2d:18:6c:b6:31:3c:46:ff:54:f7:82:
a9:a7:e5:af:f2:10:01:24:ea:b7:c1:6e:20:30:7b:3d:be:b4:
f1:5f:97:39:69:aa:75:67:7e:c3:2f:1a:46:57:ef:f8:62:73:
c6:9e:6d:e1:7d:cf:88:9f:df:8e:92:55:1c:fe:19:5d:77:d9:
49:a4:41:de:d9:0b:3a:21:38:ba:a1:ea:8b:4c:0f:46:2c:53:
38:fb:fe:03:93:b5:81:10:53:e4:1c:97:bb:fe:80:0b:27:d8:
27:b5:8d:ad:12:32:24:d3:ac:91:f1:e5:e9:74:a5:ea:19:c8:
17:cc:69:b7:db:9a:75:a8:16:7b:e3:64:4c:86:1e:6f:30:c9:
d8:0e:fd:06:be:ce:50:10:62:e8:4a:b9:b1:bc:3f:e6:d0:7b:
ed:fc:78:6d:8a:c8:eb:ce:c1:4f:be:34:a4:96:c1:35:8a:e4:
6b:1f:2b:0e:88:03:6c:a4:ef:af:f8:1f:cf:56:25:82:4f:f2:
20:2e:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:29 2025 by rpki-client