Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: KC2OEkalJNFl+5/HE+rRibNWJvWademTI40wDcv6M7U=
Subject key identifier: E8:74:35:01:64:66:D7:2C:39:CE:2C:BA:FE:D7:F1:2C:EA:54:DB:D2
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0198D7E115E318DAFE45EEA4C59D1D64DEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 063D
Signing time: Sat 23 Aug 2025 17:01:49 +0000
Manifest this update: Sat 23 Aug 2025 17:01:49 +0000
Manifest next update: Sun 24 Aug 2025 17:01:49 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: bDb/DwxAVpFvmElUEoV5TdZi/JseGfYwKPqo+RzuPSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:15:e3:18:da:fe:45:ee:a4:c5:9d:1d:64:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Aug 23 17:01:49 2025 GMT
Not After : Aug 24 17:01:49 2025 GMT
Subject: CN=e87435016466d72c39ce2cbafed7f12cea54dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c6:8d:e5:70:08:63:c6:5b:93:6e:26:3e:5b:
e4:b2:76:70:2b:7a:81:a0:7b:75:fb:4d:01:ec:84:
8a:2c:50:b5:a6:6c:0b:7a:79:e9:e4:bd:a4:55:be:
97:28:57:50:95:28:59:d1:87:ef:eb:9b:ed:c1:80:
e4:10:98:ff:75:57:e9:d9:f8:29:f4:c6:5f:6d:b9:
f5:d5:58:d1:7b:25:98:eb:a5:81:31:f1:83:0f:2a:
34:7a:14:05:ea:b7:f8:cf:56:fe:b7:67:bc:90:fc:
ee:e3:88:b9:34:38:67:53:18:65:f4:73:89:31:00:
29:b4:0d:4e:d8:d9:44:ea:0c:29:e8:b6:02:2f:4c:
51:b6:80:b8:8f:d7:5a:ed:99:a8:fe:99:ab:aa:39:
94:fb:66:9c:c7:6b:0a:7c:d5:b4:bb:d9:ea:fe:e7:
8d:5a:84:e4:c7:09:86:92:5c:ea:30:92:9d:fe:50:
a3:a4:d2:3d:17:ee:18:c3:8b:8b:95:59:88:09:79:
97:03:8b:b9:de:2b:f4:c6:af:e3:83:3f:f8:c2:c9:
1c:eb:ba:d4:a7:02:be:f9:a7:35:ca:e7:57:a7:1a:
43:83:1d:4a:18:65:19:ba:ed:9e:99:4f:f1:7f:1c:
b4:5d:d6:7d:46:4b:14:57:d9:89:41:44:6c:e6:87:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:35:01:64:66:D7:2C:39:CE:2C:BA:FE:D7:F1:2C:EA:54:DB:D2
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:34:e4:e6:36:a8:50:84:6e:bb:6e:43:f9:06:cc:3b:53:
87:b1:9c:0c:fb:c1:4f:6f:d7:75:e4:eb:18:70:12:e5:77:1d:
47:9c:6c:08:31:1f:b1:90:c4:50:dc:52:a0:d3:9f:7e:46:9c:
8e:b6:d3:64:20:72:66:d4:ff:f3:75:aa:d0:e1:c2:08:04:cd:
7c:4b:b2:e1:3e:a3:44:26:f8:d0:50:fd:10:d3:4b:8b:4f:07:
43:17:9e:e7:c2:53:21:f9:63:de:01:d2:d0:8d:c3:ee:18:a2:
dd:e5:8b:ee:3e:7a:2c:9c:6d:e9:e7:12:f5:8c:55:0d:1c:79:
ee:f1:10:52:a3:cb:22:7d:57:a5:38:fb:11:72:95:72:f2:55:
ed:f0:87:60:e9:dd:2c:23:0e:7b:13:69:5c:c3:06:aa:ce:cd:
80:b2:bf:e0:03:df:a2:11:e7:41:ca:8e:66:b5:f4:29:4a:5d:
1c:6e:8a:19:13:83:98:74:ac:e3:cf:ad:c8:b7:57:85:ea:eb:
a7:87:eb:0a:55:3e:79:c1:57:d0:92:88:13:54:ea:18:77:ed:
f1:45:5d:3f:1d:e3:c4:9f:fc:2e:a4:40:ad:a4:43:6b:ba:66:
ed:4b:96:ed:d3:b4:dc:df:be:3b:d7:cb:bf:d3:e4:53:e9:74:
93:01:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:09:44 2025 by rpki-client