Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: /ICC45aiv3WgWZTg9VpcRpKL3VV2pHsFlATVo1Z8BuQ=
Subject key identifier: 04:FE:23:13:7D:B9:91:50:60:8F:B5:C2:61:F8:DB:E9:64:45:E1:59
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0198D47415427E50FED12AAA1A2629AA1939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 0E15
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: nWppxCvaHhzRgxeXZBe/FUet9boSu23UtChDv4AFbhw=)
2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:15:42:7e:50:fe:d1:2a:aa:1a:26:29:aa:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=04fe23137db99150608fb5c261f8dbe96445e159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:a2:f6:18:3a:86:ff:a5:c9:bd:92:3d:b4:
1f:bb:7c:d1:8c:70:74:96:f4:43:ae:d9:9f:43:b1:
6f:b2:ef:0d:8b:2b:aa:19:93:80:0e:5c:bd:b4:04:
54:ec:32:ff:b9:57:74:b6:86:8b:fb:06:fc:53:c8:
d1:76:4d:aa:39:31:aa:49:0a:d8:cb:8f:24:50:80:
75:65:73:4d:59:8e:90:f3:ba:0f:33:73:6d:a2:d2:
fc:bd:9c:b6:f7:6c:12:ad:c1:31:a0:27:f3:ee:02:
ec:17:f9:94:8a:bb:64:76:91:8b:27:a5:e9:b4:85:
db:bf:2d:b7:91:b0:03:0d:aa:00:5f:d1:53:e1:e9:
0a:96:a9:06:63:a8:0c:b4:3b:73:46:28:42:44:9f:
37:7a:f4:f5:29:49:8f:5e:5e:a1:0f:5a:c7:2c:c8:
e8:2f:3c:01:b8:72:f5:e8:2d:d1:e4:c3:77:36:7f:
83:24:9a:16:ce:24:f7:24:d9:ec:e4:aa:b6:d6:33:
3a:d7:58:1f:50:ef:94:57:43:d7:60:ae:b4:ed:b2:
0d:08:ea:b7:e5:2d:02:b6:09:24:a2:b0:16:38:99:
17:f8:4e:46:ea:02:6e:62:0d:51:7a:73:b9:4e:b8:
f3:6f:49:ff:45:44:e3:33:0c:62:c0:fa:09:94:81:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:23:13:7D:B9:91:50:60:8F:B5:C2:61:F8:DB:E9:64:45:E1:59
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:68:d7:7b:9e:96:f3:97:19:20:16:73:99:72:ef:5c:23:96:
1b:08:35:a9:66:b4:e7:0f:9d:13:80:de:df:4d:c0:6c:c1:f2:
f6:f7:a6:13:23:5d:5f:78:2e:cd:08:ca:5f:3a:03:3d:b6:8b:
b3:0f:36:87:f2:0e:57:3b:00:2f:7c:b4:1f:09:bf:92:ef:2b:
0a:0f:b0:ed:be:c3:cd:d5:c1:22:31:ce:ba:87:ee:19:73:8a:
d7:f3:6a:b1:db:93:2a:87:0e:74:dc:8d:f1:af:49:52:35:0f:
48:e0:54:55:e2:96:72:85:c5:57:32:71:12:9f:79:9e:e8:76:
aa:15:48:95:d8:53:d9:26:8c:e4:dc:50:f8:03:67:bc:0e:b9:
ee:2b:60:4d:9b:fe:24:85:e1:24:14:ec:a4:76:92:6f:f0:3e:
a9:97:97:f7:71:6c:96:fd:15:82:e2:f9:a6:0d:b5:13:f8:33:
26:8e:2a:0f:61:e5:af:91:9e:2b:ea:0a:2f:81:17:e2:41:d6:
2e:bd:4b:04:f9:aa:e5:4e:39:7b:85:72:92:f2:37:55:99:60:
5a:9e:8e:73:d2:98:c9:b5:20:f5:b8:c4:d6:bd:7f:a8:37:48:
8f:e6:a0:5b:45:c5:80:10:6b:9d:68:89:0f:e9:cc:8a:17:26:
82:64:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:09 2025 by rpki-client