Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: vimiCQ42l9dmkBXaIqzLkcH3ChtuBtIxY03zd1AROIg=
Subject key identifier: AD:E1:C5:1E:A5:09:BA:2B:39:69:12:7E:48:2D:34:F1:DC:78:B8:86
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0198D5BB9D4072E0297D0EC2F32FEC333AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 137F
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: dQ3VdWiwGUaCUiAKT9TG1jvijThgew4ZnHpWJQ7xDok=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9d:40:72:e0:29:7d:0e:c2:f3:2f:ec:33:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=ade1c51ea509ba2b3969127e482d34f1dc78b886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:66:36:c3:6e:be:72:c3:ca:40:ae:7f:04:
44:be:3f:34:11:af:07:c2:d2:93:3e:be:91:b5:54:
9c:35:3c:8a:ca:b0:d1:f6:dc:98:a6:6d:d9:0f:f9:
cc:6b:c9:05:2a:de:bc:13:03:41:5a:49:57:0a:c7:
cc:7f:aa:7d:f8:1b:41:b0:3d:b3:8c:ca:98:c4:a6:
0b:13:57:42:4c:ca:52:b5:44:36:ec:18:06:3c:e7:
2e:57:10:eb:4b:09:3d:0d:59:c4:03:4d:33:ef:cf:
ee:4a:05:b3:c2:30:df:5e:a3:fa:03:7b:34:22:99:
18:6a:73:18:09:cb:7b:cb:22:ab:a2:07:fe:af:84:
b1:20:18:d5:5f:70:83:a7:ca:c4:52:dd:b2:1d:db:
72:de:f0:16:8f:89:f2:01:cb:28:c9:64:37:e2:83:
93:b3:3d:4e:da:f9:fc:f0:cb:f4:89:45:e8:ea:c7:
8c:9c:53:4c:8d:67:c4:2e:d4:1a:3e:56:b3:2d:9e:
9a:0e:17:d6:ea:19:cd:25:66:1c:6f:c2:34:97:73:
ee:b1:7a:89:13:54:d6:77:33:cb:a9:22:6e:18:de:
fe:9f:d2:85:eb:d6:9e:71:e5:6b:17:a7:77:e2:04:
e6:8e:a2:53:e7:0b:c6:35:d7:55:c6:b0:12:11:21:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E1:C5:1E:A5:09:BA:2B:39:69:12:7E:48:2D:34:F1:DC:78:B8:86
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:96:5f:e0:15:24:70:85:57:fb:fa:b2:ad:3b:c4:46:64:83:
16:2c:90:e8:1b:ea:a8:69:2b:ac:58:7d:17:04:4c:50:2d:b0:
80:59:40:61:8e:3f:c8:08:7d:89:47:8f:db:ff:a8:f9:98:0c:
cc:73:43:f3:77:1e:4e:9f:4c:20:bf:b0:31:ac:04:8a:60:11:
e8:36:54:a2:3e:6a:a3:95:69:22:91:cd:42:0b:f4:d8:c9:e9:
63:01:33:01:87:1b:d4:19:ec:65:1f:1d:4b:68:25:76:61:07:
48:49:ed:35:35:6d:04:c3:e3:5d:53:a2:d1:62:ee:40:cc:80:
24:4f:bc:e8:e7:a1:41:f8:0d:40:5c:a9:7b:2b:40:0b:5c:db:
ff:53:71:93:44:ac:16:df:3a:be:46:60:15:ac:d8:5b:6e:19:
b1:77:92:46:07:a4:95:fd:44:74:c9:66:ba:09:e4:40:8a:d4:
47:e8:3b:9f:fc:35:e0:25:03:05:69:9a:8d:bc:f5:c1:5e:79:
3f:b8:7a:6c:d6:cd:ad:55:19:39:e2:a0:2d:2a:51:f1:9d:c8:
7a:ff:d3:1f:5e:70:15:d0:7d:f5:44:aa:a5:77:6e:b6:e6:5d:
fc:d7:b1:a8:1c:b7:ec:aa:be:da:ab:96:da:0b:2d:00:0d:28:
18:6a:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:12 2025 by rpki-client