Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: LkYVlCP6gJ2b3AGhw/P5kvM96wDh1YTJLdN4c7JHI0g=
Subject key identifier: 8D:32:74:90:A7:04:00:AD:F4:50:DF:87:D9:12:AE:43:7B:82:1D:89
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0198D65F1D7F2BAE1335C88C4E68BC7F3C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: HJjktduq0+dDPj01brGPt9OOPdpivPeOw2SFrsOFF44=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1d:7f:2b:ae:13:35:c8:8c:4e:68:bc:7f:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=8d327490a70400adf450df87d912ae437b821d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:4a:76:5d:f4:2b:6f:0b:37:78:ee:43:81:
3e:ad:e4:ca:e0:a4:66:ae:de:a8:db:b0:25:67:37:
85:41:08:e0:63:2f:a7:36:6e:f8:6d:8f:c5:e7:19:
16:41:b4:47:38:ff:eb:58:4d:04:c9:32:e8:87:a0:
97:e1:3e:10:ce:92:70:66:f2:67:ec:65:af:81:48:
d8:e0:eb:2b:d5:52:f6:74:7e:24:77:0b:0f:34:7e:
6e:4f:3f:78:7b:5c:db:14:7a:c7:5b:13:64:22:fb:
79:fa:42:72:e6:ab:16:5f:4f:1a:7e:ae:cc:21:27:
82:d5:b4:52:b1:0a:e6:64:f4:35:e5:ca:a7:f5:c6:
14:85:69:ce:19:9a:c7:19:d6:8f:97:5d:b1:5e:bb:
bf:df:ac:e7:55:09:bc:4b:e1:2a:38:c5:b2:a8:2e:
bb:54:42:3c:94:1e:d6:11:ef:90:ba:0e:38:2d:61:
ae:53:5c:19:04:59:59:35:87:0b:bd:0c:70:84:f6:
e5:54:a0:75:0b:d1:d5:2e:e6:89:d0:b8:09:f4:be:
c1:18:cd:6a:9b:33:d0:7c:a0:20:cd:e3:da:c7:fd:
ba:dc:46:fb:c4:5f:5b:16:db:cf:21:b8:30:08:9e:
45:2a:48:68:cf:17:4a:fb:c7:76:04:c2:d0:de:52:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:74:90:A7:04:00:AD:F4:50:DF:87:D9:12:AE:43:7B:82:1D:89
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:7f:70:8b:70:5b:02:47:c1:36:b1:36:a5:fd:d3:b5:a3:
03:7e:63:1e:77:27:e8:16:1a:22:1c:10:0a:33:48:d3:9d:33:
96:c9:19:5d:92:b1:ea:a9:ac:e9:1a:aa:b5:fd:39:2a:bf:3e:
17:f8:56:d5:f8:83:87:47:0a:e3:72:86:f3:45:4a:9a:3a:66:
ab:47:86:6f:3d:07:55:e2:1c:a1:b1:a1:cb:1b:5c:b7:99:79:
bf:88:12:cd:37:5d:7a:f9:7d:87:cd:e0:4a:88:04:ea:f1:2f:
f3:1a:e2:c7:33:24:02:80:16:51:25:31:6f:b2:b3:47:c6:04:
56:f7:90:2b:33:76:0b:c9:ef:30:1e:a8:38:6d:a0:eb:5b:9a:
85:f2:3f:d0:12:88:26:58:a7:e8:74:66:2b:ac:a3:3b:cd:f8:
fc:0b:17:11:1f:d4:3e:90:f9:ee:74:d8:70:ce:fd:5b:ad:1a:
91:73:a1:41:68:7a:29:80:4b:49:1f:4a:b5:38:df:c4:48:c8:
09:51:0e:99:bb:61:de:7c:38:72:3a:a5:d9:87:c8:7f:cd:84:
f3:1c:b0:b7:b5:ab:41:d5:8d:36:46:23:7e:11:df:1a:5f:c0:
f5:3d:8e:57:8b:ea:d8:57:94:a2:65:2c:5d:17:76:51:2d:0c:
d4:86:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:37 2025 by rpki-client