Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: evTnXqfWOscm6S+FzbssHQaXLzpjS0rYOOdvQh4o50Y=
Subject key identifier: 35:AF:81:79:A5:41:B3:74:5E:48:15:91:19:5C:76:73:E7:F2:70:04
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0198D6CDAF3F3BBC945C71C9DBCF247DB282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 06F6
Signing time: Sat 23 Aug 2025 12:01:00 +0000
Manifest this update: Sat 23 Aug 2025 12:01:00 +0000
Manifest next update: Sun 24 Aug 2025 12:01:00 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: A/grlzy2ymhOwdocESU3CNcqZ7XYDgL3ePkqrEcmrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:af:3f:3b:bc:94:5c:71:c9:db:cf:24:7d:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Aug 23 12:01:00 2025 GMT
Not After : Aug 24 12:01:00 2025 GMT
Subject: CN=35af8179a541b3745e481591195c7673e7f27004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:ae:9a:2b:0f:5d:ea:6e:37:30:2d:42:58:
db:76:f3:72:ba:27:df:9f:c3:ce:3d:6f:7e:f3:66:
19:5e:5a:7d:ca:37:31:dd:5a:6b:c8:3a:67:e2:59:
91:10:b8:3f:9a:17:ac:38:80:34:f6:d6:f2:1d:7c:
1e:26:48:2c:f7:58:9a:e6:ee:d3:48:f1:1e:7c:0a:
1d:f1:cb:42:9b:39:84:fb:a1:00:91:18:f8:25:49:
92:09:ad:c6:80:22:fe:33:41:74:64:7b:83:cc:93:
9d:bb:73:d6:91:af:03:fa:64:67:ad:54:54:e6:15:
d3:1e:40:69:cd:2b:57:87:2b:09:52:55:ed:bb:52:
6b:a7:c8:49:1e:f7:b4:20:dc:85:13:e0:7d:b8:f6:
58:85:f6:ea:d7:c4:93:57:b7:74:73:d3:90:22:d9:
b1:d3:d8:b4:16:4b:01:bf:f8:2f:8e:db:00:87:a4:
2d:9b:7f:83:7f:99:5a:f7:2e:6f:2b:54:3a:d8:e8:
58:1c:86:08:d0:d7:9a:8e:4d:08:bf:bb:4c:27:38:
54:85:25:03:45:1b:fc:09:22:dd:a3:67:55:b3:06:
a9:ad:e5:c4:2d:07:7c:10:7b:e9:1e:00:2e:0f:a1:
ae:cd:b4:39:13:0d:b6:d4:7b:8d:56:cf:d2:b6:35:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:81:79:A5:41:B3:74:5E:48:15:91:19:5C:76:73:E7:F2:70:04
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:a5:b3:96:33:80:1d:46:7c:24:f8:29:7e:29:72:3a:f8:
c1:ea:09:62:ab:4d:5b:59:28:06:5f:1e:06:79:31:9e:da:af:
09:7a:4e:c1:ed:b2:42:6e:a2:50:24:6f:f5:22:96:9d:53:3d:
5a:ca:45:81:6d:ee:74:3f:91:08:47:c0:1f:e6:4f:a1:83:7a:
ea:d7:63:8e:af:99:c0:a9:b0:f4:d7:e3:b6:98:f6:21:dc:2f:
ad:91:cc:b3:4a:a3:cd:98:79:90:6e:1b:37:81:5d:bc:1b:f6:
55:72:20:cb:c5:4b:d8:ab:35:75:a9:f0:03:1a:b6:b3:8f:32:
e5:f7:c0:08:75:b6:db:25:19:94:9c:19:b5:ea:e5:cc:8a:ee:
86:81:b6:1f:31:f3:23:d8:f6:56:b3:49:3a:b3:a4:ef:e7:60:
48:07:bb:b5:47:3b:7a:7e:27:41:53:8b:68:e9:94:53:7d:31:
0e:ee:30:8a:76:6f:bd:9c:fe:b2:43:50:37:19:f9:17:10:e9:
33:34:1f:d6:96:7d:4f:05:96:0d:29:46:ce:38:e8:49:bf:32:
24:35:d1:97:33:a3:dd:61:b9:79:d9:dd:46:c2:bf:f4:39:76:
2a:f4:85:e7:d8:2a:1c:1f:ad:ef:d4:c0:de:2f:cd:c9:97:fd:
c9:8e:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:09 2025 by rpki-client