Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: 93P0IB3MqUmeCx0m7pAv2ZJiviPeYNjbTJmU62fHwnQ=
Subject key identifier: 02:97:6C:FC:D0:63:51:7A:13:F9:64:D4:D2:D3:AA:61:DC:2E:14:99
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 0198D5F12BBD864357F1E283651DEBDE5D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 092E
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: fgGn+8kDZAct0Ryq0DNbvRxveZYRvATZ2cnQO1AOzLs=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2b:bd:86:43:57:f1:e2:83:65:1d:eb:de:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=02976cfcd063517a13f964d4d2d3aa61dc2e1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:ff:a0:bb:c0:ef:5f:4f:9f:32:d6:49:59:
29:19:82:21:b3:5c:09:6c:a1:a9:0d:0a:3f:26:c0:
f8:6f:bb:a5:62:1c:5d:ca:a8:3e:9e:fe:cf:71:e0:
6f:7c:c5:c0:fa:55:5e:7d:c2:32:02:f9:f4:e7:49:
13:43:41:d8:50:91:f6:f0:60:7d:1e:3b:91:63:75:
1d:db:52:6b:84:10:22:e8:1e:59:61:e9:f4:80:8b:
c6:49:be:f5:f5:d8:e9:09:99:00:6d:93:47:09:3e:
8c:d0:4d:61:ac:47:e2:75:a5:f9:5f:d6:05:df:02:
cb:c4:18:f6:e8:2d:b9:7f:22:7e:61:39:10:0e:dc:
8f:95:1b:5a:f0:05:50:b4:6d:16:3f:28:31:d1:29:
48:b0:33:1e:68:ff:db:99:fd:9a:80:2b:32:61:19:
85:5b:a9:4b:fd:76:e0:f1:90:68:34:bd:f4:f9:6a:
11:73:56:b2:87:97:45:af:2f:d8:a6:f7:6d:e4:2f:
56:7e:01:98:06:1d:e9:4f:e9:98:3c:74:c7:6a:6e:
71:0e:92:d6:9b:d5:a0:cb:b3:83:f5:96:32:fa:c9:
80:9f:56:86:7a:9b:e4:8e:76:81:4b:3d:cf:d4:30:
f5:c6:f2:80:f0:28:b1:8a:0b:41:01:e7:27:50:e0:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:6C:FC:D0:63:51:7A:13:F9:64:D4:D2:D3:AA:61:DC:2E:14:99
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8c:5d:ef:a8:9b:01:e8:74:f7:0a:d3:3f:29:6f:01:9c:f9:
88:93:ea:82:82:2c:5a:fc:b0:e3:13:b2:9b:a6:c6:30:30:95:
0a:f2:60:00:cb:b1:0d:20:73:19:ac:d6:7b:b7:db:ca:35:26:
3b:8e:71:68:b3:e7:96:dc:79:ed:26:a3:9e:ed:4f:68:98:f7:
d7:72:11:1c:04:7c:78:89:50:18:3e:04:a4:de:d7:d8:ec:5a:
9a:29:3e:57:6c:b8:e9:1b:1f:61:da:44:3c:e3:81:9b:22:be:
b3:f3:59:0b:dc:6e:4c:54:61:69:74:01:da:b4:5c:d9:9e:3e:
f4:be:27:de:d7:23:bc:65:de:d3:e3:32:39:b2:46:59:1b:97:
7b:1c:06:78:72:21:3d:c6:58:95:67:e8:de:5e:cc:8d:0b:8f:
38:49:6a:d1:70:31:9d:4f:bf:c6:19:fe:e1:2b:3d:25:90:9d:
fb:3b:21:3c:b7:d0:f5:43:ab:ae:f9:dd:45:8c:fb:48:a5:57:
3b:d7:27:14:cb:20:79:3a:3e:c9:a6:99:12:90:d7:8e:1c:05:
a1:af:07:a7:a6:d9:79:68:37:80:c0:46:9e:d4:06:df:8b:7c:
29:87:2b:7e:7b:a8:1d:8d:60:d8:ee:52:a9:23:9c:20:06:9e:
cc:d7:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:21 2025 by rpki-client