Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: MSI7n548r2bPogZJxNI+g7476ayHDk2aR/rtGD6RLCI=
Subject key identifier: AB:3C:B9:99:82:2C:5F:5B:03:4C:59:69:F7:F2:5C:F8:C5:91:18:59
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 0198D4E099358DF28F7A31365E0EECD894F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: IDVytCulsnLn5CgrAK6j39SSYbLjJp+LUe/wiDkSnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:99:35:8d:f2:8f:7a:31:36:5e:0e:ec:d8:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=ab3cb999822c5f5b034c5969f7f25cf8c5911859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:27:b8:e2:83:a0:4f:79:bf:95:4a:a1:ad:
af:94:6a:2b:4c:67:b4:3f:3d:c1:fe:27:4e:b4:48:
ab:3e:f7:11:bd:ef:b7:df:a9:69:9c:0b:4b:ec:f9:
d4:69:b0:0b:d5:42:81:d5:5d:36:ba:18:f8:6f:7f:
3d:f2:40:ae:d1:8a:c4:83:26:99:3b:15:61:50:ff:
eb:b3:42:4c:b9:03:a9:ba:98:f4:e7:f8:15:e3:4a:
e9:61:ba:de:d1:1a:e1:8d:55:78:f5:63:d2:a5:51:
9b:a2:47:7d:fd:c2:13:b4:c4:07:c5:94:c9:67:1a:
84:b5:a7:ff:d7:e9:eb:e1:6c:94:c5:66:94:9d:17:
75:bf:47:3e:06:12:31:cc:43:6b:08:67:5a:8d:a0:
49:28:ae:a0:1b:70:94:40:31:93:1a:81:fe:d2:fc:
4a:37:7a:6e:3e:46:a0:cd:e2:71:5a:ac:84:bb:50:
8f:f2:59:f4:f3:2c:c3:b4:7a:50:00:7b:55:46:20:
12:35:98:aa:19:d8:42:af:be:39:cf:2d:81:58:3b:
19:22:29:89:d3:b9:98:ef:7c:55:80:d9:2e:e7:91:
b9:d8:5d:80:8c:e2:59:a5:e2:48:6c:42:39:ea:b3:
03:2a:c7:d2:11:13:7b:78:25:5d:2a:a7:da:4e:19:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:B9:99:82:2C:5F:5B:03:4C:59:69:F7:F2:5C:F8:C5:91:18:59
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:4e:8c:6c:98:ba:ec:7c:0e:13:f7:34:f2:bf:75:f8:35:
35:55:cc:3e:b6:7a:3d:da:bc:9d:f5:83:6a:f3:a5:c8:11:36:
db:35:e4:01:67:31:ea:5d:a0:6d:ad:95:32:ee:a4:ec:a7:81:
74:e2:bc:67:e2:83:1b:4c:ad:46:02:5e:f5:6b:4b:e2:d9:de:
79:74:4e:54:30:d5:5f:00:f3:64:75:b6:b4:1e:55:a2:06:6b:
c2:d8:e1:bb:82:5d:73:c9:bb:54:09:a6:a0:22:b4:d6:5e:59:
1c:9d:56:9f:77:c3:d9:e7:c5:a8:f5:15:76:15:2f:1c:70:1b:
de:cb:77:51:3c:b0:73:b9:28:86:02:2f:af:e0:57:41:b9:33:
bb:18:77:8c:94:20:be:df:dd:31:61:ce:f4:b5:6b:ca:a3:8f:
39:e3:4d:57:4c:98:26:4b:42:09:6d:f1:8b:81:1a:59:28:8d:
8c:8c:37:71:5a:64:05:9f:9c:5d:48:6d:12:93:55:33:b8:f1:
cc:72:dc:ea:3a:60:33:18:dc:fa:6b:30:13:81:19:a7:f1:1b:
91:b3:da:d6:c7:1f:42:e2:89:35:dc:5d:f6:00:2d:d2:c0:10:
fb:99:0a:ae:ce:2e:8e:df:d7:e4:a3:d0:64:62:db:83:4f:4a:
bd:f8:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:36 2025 by rpki-client