Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: c6SSDBvdFttW90IbNm+kpwKJNIsc8IbtOv1+TQj+11Y=
Subject key identifier: 49:D4:EA:98:05:6D:82:A6:83:68:44:DE:F9:98:6A:6C:50:06:0B:30
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 0198D6CD7C12C213718538B3CFF537D9626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0CCC
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: 8Ov3JNx1ue7+PWU5AcIl88loRNYF+rCNlXvqQnjK+2U=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7c:12:c2:13:71:85:38:b3:cf:f5:37:d9:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=49d4ea98056d82a6836844def9986a6c50060b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:9a:07:ca:23:67:81:22:ea:a3:3f:61:a0:
d3:5e:76:10:fb:f6:1a:05:9d:d8:1c:d3:80:a9:07:
1a:92:63:a3:7c:30:bd:5e:78:e9:b4:80:15:84:ea:
8c:68:76:69:31:28:ef:96:87:c0:db:9d:f5:d7:ee:
b8:07:4d:b7:87:58:ff:db:c1:88:ba:f2:9c:c6:43:
a6:ff:8a:b9:de:8f:78:ec:56:95:9c:0d:46:d5:7a:
44:16:e3:5b:1d:30:79:8e:d5:27:0b:6c:8e:a7:6d:
4a:48:66:e8:a1:99:63:20:52:a5:f5:3b:3e:97:7e:
0a:5d:9e:42:fd:f9:2a:ff:04:e5:a6:af:f4:17:9c:
3c:9c:31:b7:96:b8:08:4a:0e:30:0a:d0:8b:90:e5:
3f:26:f7:20:a8:d7:0f:45:48:2c:71:1c:c5:4d:10:
00:74:b4:a6:55:e2:70:14:48:ea:6f:7d:00:d1:a0:
b5:b0:2e:81:03:42:80:92:97:25:fe:75:1e:4f:32:
5f:0d:e8:8e:67:75:53:e5:3e:d7:c1:8e:86:ae:5b:
e0:a8:a7:9c:e2:2c:c5:ae:b1:22:89:0e:b5:cb:d0:
c1:2a:f7:13:d8:6a:40:c9:34:a5:c6:ab:0a:43:3b:
f6:b7:ab:6a:ae:04:16:ff:e0:2b:b3:fe:e1:07:20:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:EA:98:05:6D:82:A6:83:68:44:DE:F9:98:6A:6C:50:06:0B:30
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7f:9a:6a:28:fc:8b:77:3b:9d:a7:18:20:ae:3d:7b:4c:7e:
56:ee:db:3a:47:99:c0:65:87:2e:5a:6a:17:d0:a0:38:c0:62:
2c:26:5d:c5:68:27:7f:54:66:87:4b:01:f5:8d:06:c0:67:bd:
8b:0a:27:3a:60:a9:24:40:af:09:b7:6b:d1:ef:93:20:43:35:
95:a8:9a:05:99:bb:ba:4a:8a:73:46:63:d5:4a:24:8d:a5:ee:
93:2b:0e:43:99:f1:a1:f9:8e:18:85:d5:44:34:72:13:6c:23:
bd:5d:65:bb:3a:4f:33:af:35:5c:2e:42:0b:10:63:5c:d7:b3:
56:30:67:64:0a:71:23:e1:83:f1:df:77:7a:6e:4a:54:51:74:
04:ff:4f:85:da:64:99:3e:d4:c4:17:71:e3:12:74:46:d4:86:
eb:ea:5a:59:2f:59:5f:73:16:4f:0c:cd:2f:64:c9:12:f4:57:
77:fc:a3:24:52:1b:6f:b0:dc:e9:a5:d8:73:d3:b7:fb:d5:61:
d5:f5:d9:7e:98:75:ed:4e:4d:2a:0f:51:e1:90:ee:70:fa:13:
2a:26:14:af:88:b8:6b:81:da:6e:32:52:2a:42:b3:6c:1e:b8:
22:8c:7e:de:06:16:28:1b:91:5c:45:cc:59:94:e6:e4:55:51:
57:89:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:58 2025 by rpki-client