Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: U/dAO+V8S7F6B35QINNAVtdGZiQogM1qjJW1yZuUsUw=
Subject key identifier: 7D:6F:1A:36:23:C6:49:A6:5A:F4:DD:D6:09:F5:CD:30:38:EB:D8:12
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 0198C56DCAF5FD582E86D393A9AEF73CF19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0817
Signing time: Wed 20 Aug 2025 03:02:43 +0000
Manifest this update: Wed 20 Aug 2025 03:02:43 +0000
Manifest next update: Thu 21 Aug 2025 03:02:43 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: s78EScdyqtlfW1H2wMRDw5/TvCI/CQHjFHH8Irjtr7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 03:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:6d:ca:f5:fd:58:2e:86:d3:93:a9:ae:f7:3c:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Aug 20 03:02:43 2025 GMT
Not After : Aug 21 03:02:43 2025 GMT
Subject: CN=7d6f1a3623c649a65af4ddd609f5cd3038ebd812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:34:ac:ad:f5:83:26:3b:ca:11:0a:be:a5:
f9:41:3f:11:8a:0e:1e:fd:68:77:c0:f2:de:da:86:
18:4f:13:7c:8c:8f:09:cf:99:8b:79:00:f2:fc:5c:
d1:94:4d:31:78:68:28:2e:a1:3a:23:48:7d:d3:7c:
c4:30:c6:16:ef:7d:e2:b6:17:8c:69:51:b0:66:09:
7d:a3:ad:2a:b5:1d:45:9f:f6:18:c8:06:d9:d3:44:
5c:9b:a4:1e:48:55:0a:6e:61:a4:8f:e8:da:33:77:
37:e4:e7:7f:88:29:72:29:47:a3:91:a9:7a:16:93:
b6:ca:a0:f6:cb:c6:56:24:85:81:51:52:95:fe:91:
2a:54:23:38:1d:b5:4d:02:9a:c3:2f:2f:8d:c6:48:
5d:fd:c5:b4:1b:37:8c:b3:ea:52:9e:e6:5c:bc:b5:
24:63:b9:30:ac:b4:1f:6d:cf:32:84:98:3b:37:2a:
4d:6e:6a:31:31:30:49:bc:94:76:d4:9d:d3:0b:b1:
49:99:73:79:23:cb:17:d4:60:c3:98:f3:49:03:72:
29:dc:f0:79:b1:b3:be:80:f5:f8:3f:ce:c4:78:d3:
f9:16:62:6d:52:9c:c6:5e:27:29:66:4d:ab:b1:5e:
65:27:5d:f7:a6:d3:2f:cc:99:3b:f1:7f:6f:23:e8:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:1A:36:23:C6:49:A6:5A:F4:DD:D6:09:F5:CD:30:38:EB:D8:12
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:ee:ff:4e:63:cc:ac:1c:55:3a:b4:4f:3a:f2:f9:6c:a1:
17:58:48:b1:48:30:a2:fd:50:ef:0b:8f:0a:6d:ae:55:1b:d9:
7b:13:0c:c8:b3:b7:c6:a9:76:52:51:49:bd:d6:67:89:d1:1c:
d2:96:4b:70:b7:5f:c9:00:b3:5a:9c:af:c4:b4:67:8e:d5:c9:
f4:45:42:a9:ad:92:db:d5:45:c2:70:71:8f:b9:f5:35:61:e4:
2b:58:c5:f5:25:31:25:0b:78:83:6b:a9:1c:de:09:ef:7c:ae:
e4:9f:2c:bc:ae:3d:05:70:43:cf:48:4f:54:db:f6:ef:9f:41:
b3:3e:2f:5b:6d:5a:4c:ae:ce:79:d9:3e:c5:3e:1d:f9:34:69:
94:ba:0e:88:a7:b0:52:62:c3:2e:40:27:da:51:3c:83:df:8b:
3c:23:53:d3:a0:27:e6:a0:f2:f6:dd:18:ce:5e:40:95:e6:e3:
9f:12:d1:4d:b7:d3:81:3b:38:19:09:ed:b9:17:d5:40:8d:fe:
f1:66:37:d6:7f:70:40:4f:09:95:dd:16:b2:3f:9f:3d:5c:2f:
17:99:f0:c4:51:b7:23:0d:56:0e:d8:d3:71:20:23:74:02:0f:
5c:0d:80:ae:4e:3e:9f:70:88:b2:95:df:94:9a:2a:ed:a3:4b:
ed:69:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:53:26 2025 by rpki-client