Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: 8TBpg2EcIcphPxoOrDoBCdnlp9g1Ks7fWh0WHIScrCE=
Subject key identifier: C5:9D:6D:FA:CC:C8:C1:11:93:95:F7:A3:F7:00:AB:B0:94:A1:EA:41
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0198D5BBDA426377E8E738A2C5459403E08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1353
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: C9twfQnMSex9Cxe39kFJ5GUXDAlRmn42utpf2Ge2Jzk=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:da:42:63:77:e8:e7:38:a2:c5:45:94:03:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=c59d6dfaccc8c1119395f7a3f700abb094a1ea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:06:c6:6e:e8:1f:24:3f:ce:03:99:1d:ee:
a0:13:4a:87:57:65:d1:1e:b3:73:94:d3:6b:86:76:
73:53:72:6c:a8:8f:05:eb:02:c5:54:1d:4f:15:4b:
38:6d:d8:7e:f7:49:8c:25:a5:bd:d3:3d:c6:a2:48:
de:d9:87:b2:41:59:c6:c8:0b:1d:6a:c2:1d:41:75:
59:c9:65:cb:bf:53:51:23:9a:28:07:8d:75:f9:69:
fa:ec:89:03:a6:a3:9d:ef:cb:b2:a6:2a:5b:38:4f:
e7:2e:4e:58:4a:95:bb:41:27:d0:dc:6a:bc:2c:6f:
22:79:20:bc:6f:7b:8f:db:6f:81:f8:d2:de:29:1f:
de:48:81:bd:51:f4:46:dc:30:47:07:de:20:c3:4c:
6a:f8:ce:08:e6:2a:db:c9:52:9e:35:5e:93:60:cc:
b1:6d:9f:4e:86:38:79:7b:c3:c9:25:fb:37:e3:ab:
ac:db:ec:1b:86:8d:a0:f5:7e:dd:c5:b9:74:57:26:
59:90:1c:3f:a3:f2:25:71:60:23:34:98:46:8b:10:
9f:57:53:6e:68:ff:59:ee:ca:87:2d:19:1b:48:d9:
e0:68:3f:d8:31:8f:ce:bf:d0:60:7c:29:6b:52:08:
8d:dd:0a:e1:8d:1b:f7:ab:28:33:11:74:98:07:a5:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:6D:FA:CC:C8:C1:11:93:95:F7:A3:F7:00:AB:B0:94:A1:EA:41
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:67:9d:b6:35:d1:ec:99:52:d2:95:ac:f9:87:56:73:78:
b3:b3:53:02:44:c9:71:d6:ab:69:ed:6e:fd:17:2b:ea:ef:0e:
36:c6:9e:74:35:fd:b3:70:ad:20:32:50:04:26:05:32:e0:08:
54:88:e5:7b:81:67:1f:1f:12:ea:f9:09:9f:8f:e3:1a:ee:a1:
02:34:48:69:7e:e0:53:5e:eb:a6:6d:c9:ca:b8:44:9c:4c:11:
55:2a:98:69:07:94:f3:b7:d1:f7:9e:88:bf:ce:25:e3:e6:16:
23:18:64:ca:49:b1:ac:1a:b9:5c:06:37:79:82:76:18:38:44:
e7:aa:08:9a:0d:e5:05:bb:b7:d8:81:99:1f:65:8c:1a:30:5e:
5a:30:53:78:2a:9f:43:1c:29:be:10:6b:2c:ad:a4:40:3d:ec:
4c:e5:a4:d6:e2:51:ed:6f:00:51:8e:ca:5b:2f:88:18:bf:62:
4f:83:ae:cd:a7:dd:13:c7:2c:59:97:cd:74:e3:f0:74:f5:37:
d9:b1:56:54:2a:97:10:60:bd:64:59:90:06:12:db:31:d2:bf:
b8:81:f5:1b:4d:b1:c0:db:a5:dd:ce:a3:1f:bd:3b:2b:ba:4e:
ad:ab:e0:1f:f7:ec:dd:4a:a5:ac:65:87:33:e4:52:3f:f8:98:
98:27:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:30 2025 by rpki-client