Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: ROO8WIQtfIEW0pcyu9MJVjKsXzOewOGae7umwAbuqHc=
Subject key identifier: D6:DF:BE:08:A6:9C:AD:1B:BF:31:08:5A:F1:7D:55:EE:6C:2C:76:FF
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 0198D660B73DCCE996195B38F2851B02C9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0E10
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: EQ19tUEzzEvJsMcRACuz+1veJxl3QuMpK21Mv+PiZ4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b7:3d:cc:e9:96:19:5b:38:f2:85:1b:02:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=d6dfbe08a69cad1bbf31085af17d55ee6c2c76ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:ca:e3:08:17:87:a8:65:5c:cb:cf:b4:ee:
2a:ed:6b:7d:d5:19:5e:07:f5:b6:aa:d8:dc:bd:b3:
df:04:09:12:92:39:f1:88:07:86:8b:cc:9f:1b:b2:
53:6c:56:0e:8c:5b:ce:c0:f8:51:72:54:5f:4b:d5:
cc:bd:38:30:67:0e:79:e7:72:ee:17:68:84:c9:d4:
60:5d:3a:83:49:37:f3:0c:a8:6b:2a:e3:b6:77:b8:
22:b5:9f:6d:27:62:a3:48:15:8e:e5:f5:22:28:99:
44:a9:0e:6d:a6:ef:9d:88:65:a2:4d:4c:e2:d9:02:
c8:13:35:2e:ff:5b:e2:d4:92:7f:ef:4e:fa:29:d4:
5d:69:d4:3c:ff:41:5d:cb:be:8b:fa:3f:c2:e3:a5:
3d:88:6d:4a:c0:01:4e:64:f3:31:5c:98:23:cd:2e:
01:d3:52:fd:48:b6:3d:64:0c:cc:25:1e:61:05:66:
49:ef:d6:a4:d1:df:d6:2e:ed:dd:fe:e2:85:69:94:
54:80:e7:74:5f:07:a5:b2:89:b3:b9:67:bf:af:b6:
8f:9b:38:17:04:de:7c:0d:29:3f:be:ae:5f:29:12:
bf:f2:35:47:f1:26:84:00:42:bb:91:95:c3:35:73:
62:15:83:c3:29:d4:9e:d3:0d:1c:86:5a:6b:c6:7a:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:BE:08:A6:9C:AD:1B:BF:31:08:5A:F1:7D:55:EE:6C:2C:76:FF
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:55:64:6a:a1:b7:42:a0:c5:66:eb:a7:df:85:ea:4c:4a:
8d:45:49:bf:94:02:74:03:bc:bb:b2:f9:e8:7a:40:c9:21:4b:
30:58:c3:a7:b7:1e:f0:8c:b9:01:e3:83:88:a4:4c:03:9e:93:
ea:07:cc:0d:b8:bb:6c:87:1b:f3:b1:f8:df:cd:56:41:2e:13:
23:44:c5:75:f6:a2:15:82:7a:c4:01:59:98:aa:e8:0e:67:1c:
f5:ca:b1:fd:95:26:1c:d7:1b:5f:2c:d6:2d:6d:61:6f:d4:aa:
dd:8d:74:01:bb:12:4a:2d:5a:3c:11:4d:d3:aa:62:93:ec:52:
3f:4c:c6:18:a7:4a:ca:fc:59:73:e0:f5:57:ed:56:9f:35:09:
a9:fc:ac:b9:e7:3b:1d:2a:78:93:bc:d6:8f:38:22:0f:a6:9a:
0f:32:6d:7d:0d:4f:d0:95:82:ce:df:6c:7c:47:c8:26:51:39:
7a:b0:49:82:d5:8b:75:c6:c9:b1:f9:f7:f8:6b:e2:ea:33:e3:
0a:73:ae:16:56:32:73:cf:11:80:7a:6d:08:4b:28:8a:b4:15:
3e:c8:c4:28:9d:5a:99:39:31:5d:18:f8:8a:ae:15:78:d7:60:
0c:8e:a9:5d:74:9a:bf:4c:c1:e0:81:7f:13:3a:8c:e7:00:be:
11:3e:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:50 2025 by rpki-client