Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: C1+VeDoqBwJQGLWxqsZt6vgPK1d87lcC3G7AMHtafL4=
Subject key identifier: B2:6B:68:B1:5C:27:FC:89:5C:3A:3A:C0:F8:48:9F:BB:30:A6:E0:E7
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 0198D5F12CB63095A283CB26CE72365263CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 0373
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: HILr7pn8NThVCSH-A_rn05fyBNg.roa (hash: eVrxL2QWFmMtU5x6MqzXrb/DJHPKJPjLI8zuxMiz1ao=)
2: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: 2ry7jVjMKU2wnexLXTnzOv3aY0kHnKO6ztTLDQAta/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2c:b6:30:95:a2:83:cb:26:ce:72:36:52:63:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=b26b68b15c27fc895c3a3ac0f8489fbb30a6e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:7f:c2:e8:8b:cc:51:ac:24:82:e6:cd:d7:
c7:3e:cf:11:8a:42:3c:d6:5d:b8:c7:cb:5a:97:f5:
61:3a:d2:39:47:6d:90:09:d5:f0:eb:bf:43:36:d0:
4e:29:24:de:d2:ae:f2:68:7b:61:65:07:37:f6:29:
d9:f6:0b:44:77:ac:be:d6:e2:b4:7a:ca:95:83:db:
9f:5c:93:d6:73:52:7a:8c:98:84:aa:3a:02:15:de:
c7:93:96:37:7d:c7:f4:21:df:73:e5:c7:aa:52:86:
65:5a:3f:d9:3c:73:2d:03:36:a1:e3:17:20:15:62:
2a:9f:e1:bb:50:7d:3e:8a:3b:3d:30:74:bf:aa:10:
40:b7:0f:8e:d7:89:0f:80:67:23:f6:3b:95:8a:3e:
35:99:d1:5f:7a:7b:43:c6:a5:86:7f:5f:5c:2c:bc:
4a:d2:0a:e6:f8:98:12:a5:2d:ee:80:41:56:cc:3d:
bf:3e:8d:ec:74:9e:99:c8:d4:1b:14:24:d3:4a:1f:
28:a6:b9:fe:a8:0c:95:b4:e8:81:6b:09:88:05:2d:
69:d1:c1:04:e7:3c:8c:b0:8b:2c:cd:51:47:ed:73:
d5:74:3b:6b:bc:23:bf:d8:68:18:81:72:35:78:3a:
71:d8:e6:66:b9:70:2a:22:d3:09:e3:49:47:f9:57:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:68:B1:5C:27:FC:89:5C:3A:3A:C0:F8:48:9F:BB:30:A6:E0:E7
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:57:e2:1c:ba:12:e6:05:59:bd:17:79:c2:6e:2b:32:fb:b3:
57:9a:2e:21:4b:2e:76:2e:5d:d9:51:fe:61:32:e5:7a:26:a8:
7c:66:5a:0d:97:fe:ca:bf:35:d5:23:44:e3:03:05:8b:75:29:
21:35:72:da:ba:17:43:df:f0:5a:fa:9a:be:b5:b7:c5:84:39:
82:c4:16:8f:ba:b4:48:14:b0:b8:26:d7:2e:4d:6b:6a:bc:81:
ca:56:07:da:53:74:be:f0:3c:be:03:e9:4e:d1:39:6e:82:75:
7b:f8:77:bd:95:b7:7f:3d:49:a5:26:53:43:eb:e2:b4:42:62:
1b:66:4a:4e:bc:db:e1:52:06:93:08:f4:6a:2e:82:bb:f1:be:
2c:09:e2:8d:01:c2:1a:13:29:75:6a:54:0c:2a:5b:ce:31:6a:
9f:46:ad:87:c5:59:ec:a1:00:e7:cc:be:74:8a:6b:8a:1d:18:
25:58:97:56:0f:14:75:5a:3e:04:15:36:83:82:5d:c0:c5:17:
57:0b:ce:10:8e:74:bd:e6:86:b7:bf:a4:cf:7f:53:e0:a7:00:
82:ce:4a:bd:23:45:69:81:f7:f6:0d:8c:64:a0:e0:73:ff:c1:
cc:e0:ce:3f:d7:25:02:01:c9:d5:ef:ee:1f:b4:80:9c:53:6c:
f9:c8:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:24 2025 by rpki-client