Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: zsrx+AIxOT3tTny+g6OTcn3xAhiZNyfj90Z1GFAgbRw=
Subject key identifier: 9F:AF:FE:7A:CD:D7:0B:7E:6F:CC:50:D8:0A:48:54:42:C6:35:64:4B
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 0198D5159AF955D9BB027DAFFD33ADB6DFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 046B
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: ALahTmkXqcRu3HVvjKIlmV+R6CX2Idtzb92HgLURJ5s=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9a:f9:55:d9:bb:02:7d:af:fd:33:ad:b6:df:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=9faffe7acdd70b7e6fcc50d80a485442c635644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f0:c4:62:21:0b:eb:43:ff:fd:08:26:62:46:
3e:c5:43:03:a0:f3:ab:9a:56:dc:3c:30:3c:c0:a7:
02:5e:33:51:48:bb:22:bd:50:93:42:bc:23:40:64:
51:09:07:c8:87:a5:55:7a:fa:c4:5a:37:0c:e4:58:
6c:ca:62:59:b1:2f:20:8a:10:c0:d0:81:46:3e:23:
8c:93:63:d0:88:49:35:0f:05:85:da:96:66:22:c4:
90:7f:94:a6:a0:5e:5f:16:91:6f:ab:ce:40:4d:77:
4c:f4:b8:cf:9c:ea:ca:b4:ce:05:07:d1:f2:81:d0:
78:00:9c:d1:45:8a:ff:db:50:61:0d:04:5e:83:92:
a5:b0:3e:55:2f:e2:0f:1b:c0:cc:c3:ab:a3:dd:35:
bc:b6:94:93:05:37:4d:2d:c4:61:fd:08:80:73:f0:
3d:2e:dd:60:26:75:8e:38:df:b5:be:0e:ba:92:6c:
eb:51:d5:46:44:b9:84:aa:f5:7b:f0:ea:b6:e6:08:
d5:1a:50:be:10:3e:82:16:f1:d2:00:4a:7f:6d:37:
6e:f2:0f:5e:30:ec:b7:3d:ae:dd:78:2b:5b:f4:1d:
8a:9d:ad:32:27:80:bc:97:7d:3e:40:35:c6:11:98:
3a:86:7b:41:7f:ac:7b:f3:be:74:46:a3:dc:a4:16:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:FE:7A:CD:D7:0B:7E:6F:CC:50:D8:0A:48:54:42:C6:35:64:4B
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2d:9e:70:3f:bd:05:77:d6:76:53:30:44:7e:4f:88:40:8f:
70:45:45:4c:05:72:dc:43:ae:e2:2c:82:a3:ba:ac:0b:7f:a0:
b4:a4:a5:10:fb:d5:bc:45:44:dd:30:7e:39:8b:5d:02:03:67:
d7:bd:92:8e:9a:35:be:7d:95:6f:db:cc:43:80:0a:d1:7f:9b:
11:e1:8e:92:16:ea:f9:e3:e7:91:2a:b0:0e:af:0a:4d:7c:ef:
7d:d9:b4:27:f6:b6:2d:ca:7b:eb:ad:6d:8a:02:11:a4:16:1f:
27:08:5b:87:b2:b7:0f:54:3d:be:e8:64:fc:9e:72:a1:19:b7:
54:57:1f:ce:d0:3e:7d:da:c9:a0:39:8c:2d:01:2d:03:9d:ee:
5c:01:c4:33:27:6e:af:35:68:b0:00:9e:96:0f:ef:19:e6:cf:
13:32:f6:d7:00:6d:12:f5:67:b3:c7:49:f4:8e:64:9f:6d:5d:
16:68:f2:8a:5b:24:49:96:c9:dc:f9:66:8d:3d:0d:39:5d:1b:
d9:5a:dd:01:e0:4b:e2:bd:1d:4f:36:c1:86:36:13:71:21:21:
29:68:e2:db:6b:35:13:02:fb:d7:7e:c0:44:f2:af:a7:2d:a9:
e5:ad:c8:82:db:a7:8f:95:24:cd:e1:7a:d9:40:2e:6b:6d:ff:
41:7d:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:37 2025 by rpki-client