Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: ZUsNT++MU/dtbBNQLNkvdnZF+ZLEd8Kt+7V3ICYMYHo=
Subject key identifier: 8E:E4:16:15:24:FA:CD:D5:5B:81:19:4D:86:05:1B:38:B0:10:CA:EC
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01993380905C7A7BB198DFD043615D69CAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 12:01:27 +0000
Manifest this update: Wed 10 Sep 2025 12:01:27 +0000
Manifest next update: Thu 11 Sep 2025 12:01:27 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: Dg4vR7n9jc/qVyKV+MAiDWIERKZ3XFSGxT5EDRusvYY=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:90:5c:7a:7b:b1:98:df:d0:43:61:5d:69:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Sep 10 12:01:27 2025 GMT
Not After : Sep 11 12:01:27 2025 GMT
Subject: CN=8ee4161524facdd55b81194d86051b38b010caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:c3:ec:d3:78:85:66:9a:0a:a4:94:02:57:
93:38:e4:65:18:23:aa:3b:a0:76:11:71:d5:ce:46:
de:27:cf:4b:b1:7a:f9:d7:a9:5e:28:a7:ff:f0:b6:
71:be:b4:49:25:71:0e:8f:9d:a2:11:ca:b6:21:0f:
7f:42:e8:a6:81:83:35:88:18:fd:8b:55:df:35:2b:
1c:e4:bb:4d:dd:a3:c5:4b:56:52:90:49:37:19:c5:
1a:70:d3:b6:df:0e:d9:93:b8:4a:fb:07:9f:f8:e7:
63:2b:96:8e:a0:b7:69:e5:5d:7d:ea:88:0f:da:2a:
5c:9d:33:d2:b8:c6:97:2e:e5:5b:68:cb:cb:7c:3b:
a5:ff:a0:f8:42:82:80:55:7d:d5:c2:3d:07:2b:94:
09:ef:3c:87:61:11:41:71:ca:c4:ea:e2:b5:75:21:
55:24:bb:79:e5:4b:00:27:cc:2b:6f:66:79:41:cd:
a8:16:b5:64:fb:dc:e2:7f:51:6a:d5:9c:8a:b2:f3:
98:62:5b:a8:48:7f:49:fe:60:34:c3:72:c3:f4:b1:
4b:e6:2f:17:6d:6e:d9:14:fa:47:b7:d2:77:c7:9d:
31:57:7f:27:e9:22:6b:f2:8e:d0:5c:c9:d8:3d:fa:
32:00:f6:22:fa:c1:ac:7f:dd:51:96:09:f9:27:30:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:16:15:24:FA:CD:D5:5B:81:19:4D:86:05:1B:38:B0:10:CA:EC
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2d:32:94:f7:78:89:04:b0:ca:8a:1c:bf:9c:7e:bc:5b:d6:
cf:6f:6c:b7:27:25:14:17:68:8d:42:d9:63:0c:a8:d9:2f:d9:
80:6a:11:a7:f5:6a:55:3e:3d:97:ec:4e:d4:ec:9a:70:41:ca:
af:e5:52:46:dd:e9:85:8d:87:b2:c4:bd:95:bd:82:b3:0a:91:
52:83:77:63:c7:fc:90:76:0e:d0:ed:eb:53:9e:dd:03:08:86:
9e:ed:ff:cd:ff:bb:80:d4:e7:96:2c:19:04:33:cb:48:cb:1f:
04:03:a6:5e:de:a7:39:cf:9f:a2:ad:5c:a7:47:fd:aa:a0:bd:
4f:a1:01:2f:67:b7:5c:5f:3a:fb:bd:cb:55:91:26:c6:e7:97:
3e:fa:a1:46:b9:2d:e4:25:b0:fd:5d:31:73:3d:2e:04:9c:cf:
a3:ed:41:36:73:8f:8c:7a:01:05:f9:67:3d:8d:09:27:7e:ac:
47:9c:42:06:f6:29:ee:c1:1a:c4:52:1c:57:d4:54:a0:45:77:
79:3d:28:3d:b2:16:d0:41:f3:c4:a6:ba:67:0c:50:16:84:83:
f1:cc:00:21:af:50:0f:a1:70:60:f0:bf:da:4c:b2:19:6e:a5:
c8:49:3f:86:01:1b:25:03:d5:8f:4b:42:6d:d3:48:f7:f0:d8:
c4:3a:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:30 2025 by rpki-client