Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: ncDiXKEYu8xGRyxjm0aeTkhqB5r/tyrQqDuF+momnUQ=
Subject key identifier: A9:F3:89:98:C6:49:22:0A:76:F3:38:19:87:02:75:B4:A7:4A:68:1A
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 0197D28643ACC21FA8FB7C5B2EF96EDF6643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 15C6
Signing time: Thu 03 Jul 2025 23:01:43 +0000
Manifest this update: Thu 03 Jul 2025 23:01:43 +0000
Manifest next update: Fri 04 Jul 2025 23:01:43 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: 3VmdghS38gCjM0fTBxBDWSeJr0pmh0ZiAyq4dX+hyyk=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:86:43:ac:c2:1f:a8:fb:7c:5b:2e:f9:6e:df:66:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jul 3 23:01:43 2025 GMT
Not After : Jul 4 23:01:43 2025 GMT
Subject: CN=a9f38998c649220a76f33819870275b4a74a681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:ce:8f:80:82:10:cb:f2:0e:e9:1b:1b:3c:
ee:d4:a1:bf:44:43:b6:87:9a:a6:0b:fd:c3:9c:f3:
c8:69:92:0c:da:ea:4b:c9:61:52:19:ea:ef:d4:64:
1b:23:56:7a:96:c3:27:d9:59:e7:ad:a9:b4:ed:60:
4e:6c:07:4c:54:9b:65:12:6e:20:d4:11:80:1e:f4:
cd:60:79:e3:3b:03:0d:1f:20:44:59:f9:be:47:9c:
93:15:d8:f3:6d:1f:3b:bd:40:4f:b8:6e:63:34:91:
80:83:51:83:14:c0:60:d2:9f:20:ef:ed:11:dd:34:
a9:62:0c:a7:87:12:e4:7c:e1:3b:9a:e4:d4:f4:19:
1e:75:c1:c1:73:89:2d:48:1d:02:e4:91:53:e5:7f:
bf:82:71:59:e5:4e:84:62:0b:ab:e8:2e:9d:d5:4a:
8d:b8:d1:ba:fd:64:36:31:a2:89:ca:32:37:9b:28:
3e:1e:9d:48:ca:fa:17:f8:ce:29:37:4a:d8:50:49:
0a:11:b0:b1:db:07:76:c7:8c:97:bf:1a:48:16:fe:
d0:f1:47:0c:f7:0b:7a:e9:66:a7:09:c8:2a:0d:4b:
b9:7a:ea:b5:a8:f2:f9:be:55:6e:de:eb:11:b3:49:
a1:7b:5c:16:50:b4:3a:17:e7:f2:01:d2:2d:1e:f9:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:89:98:C6:49:22:0A:76:F3:38:19:87:02:75:B4:A7:4A:68:1A
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:82:07:57:91:ea:8c:a4:8f:6e:46:2b:6d:34:22:ba:1f:
1b:71:9c:2a:bf:4f:ab:16:9c:6e:3e:6c:ee:a8:72:2e:67:4f:
16:f2:85:57:e0:0f:61:5c:61:50:9c:3e:1b:d8:29:b7:4f:f8:
08:0e:28:e8:50:4d:10:ca:70:ab:00:75:f0:b6:e7:d7:f5:9a:
bd:5c:88:2b:1d:1d:d5:ed:b9:19:75:16:2b:fe:1d:25:d3:e5:
73:47:dc:f6:43:bc:14:37:01:17:95:76:69:60:e7:e0:15:4c:
1b:bc:9f:ef:d3:ea:02:fd:98:a0:89:27:bb:bb:e9:8f:b8:cc:
da:16:24:87:8a:24:95:69:97:94:55:ce:9c:d7:08:cd:22:62:
55:87:79:04:c8:45:3a:75:10:e7:ff:b6:50:b1:74:47:65:45:
84:f8:72:f7:fd:6d:d9:9c:53:f4:38:d1:b4:14:f2:77:5a:0c:
6e:c2:cf:3a:7a:9d:90:ff:10:07:0b:89:ce:f4:c9:75:d6:c8:
bd:66:41:54:a5:6e:6d:82:5d:0f:fa:27:80:8e:10:f4:ef:a9:
3c:4b:d4:7e:2e:9c:bd:6e:15:19:db:79:79:e3:ef:d3:45:9d:
83:ff:50:03:aa:ac:ae:d2:e0:ab:fe:01:f7:c3:08:14:2f:65:
cc:a5:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:50:20 2025 by rpki-client