Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: V8ko3AbPc+ItCL0jQaX7m7r12+kkw4dsogkAb0TWVp4=
Subject key identifier: 36:7F:2C:9A:1F:8C:49:43:A6:11:BD:DE:62:9D:C1:09:86:02:72:D9
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 0198D472D2002F83BF6BF7B5EE2C35E2A0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:02:31 +0000
Manifest this update: Sat 23 Aug 2025 01:02:31 +0000
Manifest next update: Sun 24 Aug 2025 01:02:31 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: H5CU4GesHUn62Z5hTX+00Ner6QImqhSdcL39fixeHpo=)
2: rdvag5pHs9es_gyoqlFPFe0V7WI.roa (hash: ckptdnrG1RV/ZZ5MTTowIZnIHeIBz++eWuv3IdAEj3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d2:00:2f:83:bf:6b:f7:b5:ee:2c:35:e2:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Aug 23 01:02:31 2025 GMT
Not After : Aug 24 01:02:31 2025 GMT
Subject: CN=367f2c9a1f8c4943a611bdde629dc109860272d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:96:c3:d3:c4:3f:21:2a:50:f5:22:b8:96:
4e:e8:83:76:ca:3f:36:49:16:8f:ac:80:14:e6:db:
2f:fd:d9:eb:88:0f:9b:96:78:42:1a:89:d3:21:45:
6e:21:52:81:63:40:c3:1c:62:63:f9:94:3f:5e:4f:
ec:7b:c4:ce:01:90:61:c5:40:ac:ec:cb:b7:08:fc:
11:e6:f5:61:10:9a:0b:8d:aa:ca:a3:80:e9:ae:5e:
30:c9:d3:b8:ab:19:2e:13:07:e0:cc:e6:d1:a9:c2:
d7:ec:1b:69:a4:02:f2:62:b7:00:a5:02:6b:eb:f5:
90:c5:0c:1a:89:a0:2f:61:2c:9a:ce:53:bd:c2:55:
58:45:12:11:3b:bf:68:d4:f5:2b:e8:8e:a7:87:e5:
46:ed:00:c6:cc:f0:fd:03:fb:c2:7a:e2:c9:8b:63:
d9:70:6c:7d:2b:47:57:fb:df:a1:93:e6:37:f3:bd:
c4:aa:63:e1:ed:c1:42:8b:7d:4f:f0:43:d9:12:b4:
28:55:a6:43:6a:5e:cb:3e:30:d9:6e:2b:4e:b3:63:
eb:b5:a9:d0:2c:0c:69:4e:d4:e5:b4:eb:dd:7b:46:
da:40:e6:ad:15:a8:57:6a:71:7b:04:da:64:bc:6d:
32:0a:1d:2d:1f:9c:a0:f6:5a:47:93:66:71:69:8e:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:2C:9A:1F:8C:49:43:A6:11:BD:DE:62:9D:C1:09:86:02:72:D9
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:9a:55:8b:75:ef:dc:d6:38:a0:1c:12:53:4e:4e:14:33:
41:3b:ba:26:16:b6:70:29:4b:74:e1:04:1c:62:03:89:fa:97:
8c:ee:85:e9:2b:ce:5c:05:f8:0f:6d:ec:af:bd:12:de:9e:f2:
2c:09:5a:91:64:70:bf:6a:97:91:6d:c1:40:66:b1:54:c5:56:
cb:68:00:aa:ec:7d:cc:2c:e9:ad:f2:e7:fd:d4:ab:e5:fc:4c:
87:65:c1:a1:0f:bb:79:60:e2:3a:4b:88:ca:e9:68:ba:79:43:
44:38:90:79:da:a0:b7:0c:9b:75:29:da:cb:e5:3d:40:65:26:
5e:8a:3f:20:3b:9a:cd:64:00:cd:d8:f3:41:ff:1a:6f:00:20:
19:7d:05:88:35:73:b6:d5:1c:bf:7d:6c:c8:48:21:13:5f:56:
f2:01:a9:0c:c9:d7:f0:89:01:55:3e:7d:db:25:9e:80:25:0f:
fc:73:46:10:b9:41:60:cc:07:20:bc:17:f8:55:5a:d8:a9:af:
9a:33:37:4d:07:05:ff:a4:e0:8f:99:17:f9:3c:43:ab:22:69:
1b:f8:79:19:5e:5b:9b:4e:52:bb:3b:34:bf:c6:a4:90:05:9e:
51:7a:07:0d:0c:00:9d:50:31:8a:7b:98:f4:54:dd:a6:7e:10:
32:27:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:52 2025 by rpki-client