Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: lxUT8umypgmwXkMz7Clkljj+5krAJfyPkagDhAS5n/w=
Subject key identifier: 67:30:3A:36:12:C0:35:76:13:0B:05:B4:E6:D6:1D:6B:E0:D3:1C:EB
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0198D5BC56AF04A921C57F507CEB9A8D5170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0F45
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: 1z2c4Ja/1xkO/bPYb2u9sn4WI8eutj2jmDyim75HEZg=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:56:af:04:a9:21:c5:7f:50:7c:eb:9a:8d:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=67303a3612c03576130b05b4e6d61d6be0d31ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:2e:01:30:6c:fc:f3:fe:67:31:1c:6d:c1:
fb:ab:ba:4f:2d:15:9c:49:5f:6d:79:37:ad:cc:55:
bf:fa:58:56:a3:05:30:44:d6:46:36:f9:5c:20:89:
27:f9:49:b1:73:c4:6c:5d:f0:b9:c5:38:03:15:ff:
2d:88:43:bc:1c:78:10:82:83:d7:db:c2:25:57:6a:
3a:c9:42:6f:00:8a:66:b7:67:65:7c:fe:fc:32:87:
a4:6f:ad:3f:82:e9:1e:a9:d8:aa:01:6d:8f:d5:78:
48:ff:f9:c7:65:c6:b1:ca:8b:e3:bc:84:08:43:f0:
04:ad:70:0a:cb:68:ae:fa:9e:4a:fa:56:21:2e:6d:
50:6c:fc:0c:c8:25:ef:7c:79:67:1c:6e:e9:19:e5:
3a:a7:14:3f:d8:29:fa:5b:ef:75:1d:6d:34:10:cc:
d0:24:16:8d:64:d1:ec:e7:79:be:a4:1f:7d:8f:3f:
14:7d:01:cc:6e:1c:7e:64:f1:b2:50:cf:31:b0:01:
20:a2:19:91:59:a7:cd:8d:d4:1c:11:57:ac:b4:0a:
9a:34:b0:ad:a6:56:04:c2:21:cb:62:90:1d:cb:b5:
75:69:7d:f9:a3:08:12:69:4c:04:fe:51:48:e2:24:
d0:d3:43:5b:9f:c2:a5:b4:c3:2d:bf:7a:85:c4:93:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:3A:36:12:C0:35:76:13:0B:05:B4:E6:D6:1D:6B:E0:D3:1C:EB
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:1a:ad:87:64:f1:4d:c3:60:fb:ca:87:e5:c8:b8:69:d8:
f0:dd:a4:0e:1c:c3:4b:78:4e:1b:5d:6a:a1:2e:69:9d:b8:17:
f0:c7:cd:ef:4b:62:51:66:4c:a4:3b:31:3c:25:22:b5:f1:a8:
c3:1a:84:45:64:3c:ca:45:80:73:ed:76:fa:ca:60:47:bf:7d:
7b:63:64:24:5c:58:d0:b7:8e:c5:9b:ce:1f:9f:66:25:03:97:
24:63:6e:77:6b:ca:f5:76:06:d0:7c:0c:68:f1:a8:5b:c1:41:
61:95:42:d2:80:9d:b4:bd:55:35:74:ec:de:e7:55:89:77:ea:
ee:4c:e4:00:52:f9:56:c4:41:6a:b6:40:54:9d:92:93:3e:dc:
09:a1:aa:8a:da:78:21:f1:f2:42:2e:01:79:d1:88:a1:98:eb:
0f:5b:f6:7d:c7:87:7e:1e:4d:2b:23:ef:ba:7d:91:36:51:0b:
fc:a2:14:61:1d:e1:27:85:6b:58:0c:08:02:e9:64:67:51:35:
cd:af:59:ac:d3:f4:63:05:03:9c:44:67:fc:0f:c7:65:4a:a8:
34:f4:ec:7f:40:38:ea:57:f0:7e:d7:26:36:4c:fc:03:9a:ba:
26:be:27:39:11:7d:14:7f:2b:9c:39:6a:53:ed:e1:9f:04:a5:
58:54:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:45 2025 by rpki-client