Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: tbz0G05aBGpx3A4mXxBpgyY9ej7e2anh4oNLgwzAXFo=
Subject key identifier: 8E:D7:6A:14:88:D3:32:ED:22:63:99:02:E0:01:83:82:D0:C4:CA:D7
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0198D5BB9A67E217DEF913EB775012705012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1521
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: Ku4CR1bjacjoncFywSB5p+MhGWeM0fn3atzOmDCAYp8=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9a:67:e2:17:de:f9:13:eb:77:50:12:70:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=8ed76a1488d332ed22639902e0018382d0c4cad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:b9:b6:9e:c7:0d:a5:c4:17:c5:ea:62:e0:
f0:63:88:0d:11:65:31:67:76:82:cb:fc:29:44:67:
12:21:fb:c1:af:70:0d:2c:40:75:e1:35:e5:cf:02:
cb:7e:b4:a7:b6:00:9b:37:40:a7:85:5c:b6:92:6c:
17:2d:e4:69:e4:64:04:6b:4a:a9:99:99:54:61:9b:
ea:32:c8:0c:16:f5:54:52:d0:a9:ab:ff:9f:e1:af:
68:42:a1:48:9b:b2:b3:b6:df:70:c6:26:f4:b7:a6:
5d:8b:f6:0e:95:56:4f:5a:e6:39:7b:6c:5d:79:98:
21:fc:1a:0a:d1:8f:f1:e6:90:3e:4d:98:fd:f0:31:
94:a6:8a:cf:ba:40:d9:99:b6:84:c0:f2:d8:d7:cd:
a4:bc:ec:2f:a4:e8:0d:03:99:bd:32:28:85:d9:23:
42:d7:72:c3:03:f6:ca:6d:5a:3d:3e:3f:3f:f2:59:
30:f5:2b:43:df:0c:31:2b:ec:76:a3:dd:d3:c0:b1:
d3:ca:3b:9b:02:d9:84:d0:21:c0:df:74:5e:40:de:
a8:3d:a1:58:0e:60:80:71:b6:67:c4:af:7e:bb:56:
b4:b5:c0:f6:86:88:50:a0:01:31:a5:fc:05:50:07:
77:29:10:a6:3b:33:6f:74:4d:7e:a9:18:f6:dc:c1:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:6A:14:88:D3:32:ED:22:63:99:02:E0:01:83:82:D0:C4:CA:D7
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:33:f0:2a:89:7d:cb:ed:3b:72:55:18:b4:67:f4:72:ae:08:
83:5f:c1:45:1a:42:22:bc:c8:85:1b:47:a4:a7:e8:4e:e0:c1:
62:f2:aa:27:90:ae:0e:5f:f8:74:93:7e:1e:15:b1:d1:b6:bf:
a7:50:ef:3f:d1:42:71:e4:81:04:68:92:8c:86:de:23:0f:9d:
2f:06:59:7e:37:84:a7:16:88:79:f0:42:be:05:a6:4e:60:94:
8e:cc:57:c5:b2:c0:21:b7:fd:ca:e5:0c:1a:a1:2d:28:ca:bd:
cc:e0:45:64:f5:4a:85:8b:d5:e1:da:05:1e:eb:2a:5d:4d:60:
8c:66:88:ed:26:7c:29:ee:e9:87:e9:c3:4f:64:fa:f5:e9:5d:
e5:3b:c8:19:dc:49:b0:b6:1c:87:b4:37:49:1c:42:75:3c:a3:
c5:a2:80:67:6f:60:ef:7d:e9:9e:f6:3a:99:4f:5a:24:87:82:
2c:38:40:d1:fe:95:69:12:e6:ab:86:08:94:9f:41:c4:07:5b:
f0:e1:fb:97:53:9a:24:03:ea:cf:39:ec:67:d1:64:d7:4f:3f:
e0:a1:07:bb:be:ca:d3:cc:55:ed:6f:2b:60:70:95:d0:0a:43:
47:10:97:6e:7a:9f:60:bd:c2:b7:cf:6a:13:eb:0d:e7:be:d6:
31:db:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:44 2025 by rpki-client