Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json)
Hash identifier: htMQLkFGFOvhyWyVKqw2oZhuX6OMac14kQDjmR6hyQE=
Subject key identifier: 4B:B8:AD:D7:5D:D3:2B:7E:D2:8F:38:55:9A:05:69:A6:47:12:7D:DA
Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599
Certificate serial: 0198D54E0F9E88A10CC658F2E069595989A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
Manifest number: 033A
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: 933t/t+tMNG8OtQKXQNLfUBOTrXUN18KI2eIiCloRTU=)
2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0f:9e:88:a1:0c:c6:58:f2:e0:69:59:59:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5240238b828f16e60229e2633503f04846599
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=4bb8add75dd32b7ed28f38559a0569a647127dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:b1:3b:0c:d0:10:09:40:47:96:0f:7b:b0:
b0:85:35:dc:e9:b8:3d:19:d5:39:e3:6a:65:b7:12:
7d:2e:3d:9f:de:9e:f6:7c:2e:1b:2a:3d:7c:f0:d5:
fe:9a:fd:15:ea:71:54:0e:4c:6a:ca:cf:b5:c3:99:
cb:14:e2:6c:d1:2d:5c:02:d9:ff:e3:eb:e6:55:89:
a1:f8:ac:20:2c:55:c0:09:56:69:85:c6:37:18:5f:
e2:bc:a6:4b:d4:db:49:ad:ae:57:7e:d9:a6:74:6b:
7c:4e:55:f7:a2:f9:a9:11:d3:b3:9d:ad:69:3d:f1:
2b:ff:17:e4:00:15:f6:58:54:45:83:f5:44:89:7f:
a8:fb:b4:a8:49:d6:dc:fb:a3:f9:61:be:ce:70:cd:
13:ac:23:88:81:d8:02:1f:6c:bf:69:d6:3d:41:59:
f9:57:14:74:39:06:39:f0:b5:10:72:e8:9d:97:01:
09:dd:14:67:87:81:ff:49:58:74:44:4e:01:57:97:
d4:13:fb:28:dd:18:56:e4:d3:25:47:71:2a:11:23:
ea:fe:24:e8:6b:3d:59:b0:c5:08:8d:26:56:83:04:
d7:c4:d2:92:32:16:ca:80:41:75:ec:21:f2:a4:14:
ab:5a:53:25:9a:82:54:9b:2f:69:f6:9a:e9:7d:40:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:AD:D7:5D:D3:2B:7E:D2:8F:38:55:9A:05:69:A6:47:12:7D:DA
X509v3 Authority Key Identifier:
keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fb:4d:ea:37:36:22:eb:f6:a2:95:a2:1a:75:78:9b:b0:c3:
07:52:36:73:1d:3e:ca:af:b2:c1:fb:be:cb:dd:7c:2e:c9:f7:
61:bc:f9:2d:5c:35:52:b4:be:87:08:ed:34:00:da:a3:53:be:
c9:79:a8:0a:c0:50:86:0d:2a:9a:5e:1c:82:6c:4f:d3:66:d1:
92:72:fd:00:34:b8:82:a1:4d:e9:21:8e:ef:2e:b6:67:43:5d:
b2:62:3e:5b:31:94:fe:bd:98:04:92:9e:55:36:2a:35:30:9b:
19:76:bd:23:28:e2:1a:30:84:7a:9e:6f:dd:ea:21:5f:77:96:
4b:92:f9:ba:03:aa:50:9f:02:4d:5b:73:22:05:97:7d:2b:76:
71:54:d3:9b:1c:9b:24:a2:54:fc:41:9d:24:e8:c2:b1:a9:f0:
be:43:25:d7:39:cd:61:67:71:45:53:b6:d3:d3:5e:22:09:31:
8b:26:c6:0c:02:2d:82:c1:3b:30:f6:5e:99:b3:20:65:ca:98:
f9:34:f4:1f:42:1b:bf:fa:53:36:02:c4:1b:4d:fe:30:08:d1:
b8:18:55:03:74:68:56:ad:26:36:aa:8a:fd:4c:55:cd:ce:cf:
2b:3b:97:24:7d:43:90:99:8d:9d:16:38:bb:1a:05:8d:d0:84:
2a:28:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client