Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: ewrwkNxnumopiXyY26KQd8+ySsPu23H8wLaVGzGJg0w=
Subject key identifier: 52:3F:10:E8:65:25:0C:DB:05:59:9D:68:15:C0:19:A5:7D:F8:CD:F3
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0198D4A7BF3BEB4C1EC85008D5A0D85E3CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: GiN8wf3MDgWT6HJHBsyPQus30hqihcld/4SGKLTxtkQ=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bf:3b:eb:4c:1e:c8:50:08:d5:a0:d8:5e:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=523f10e865250cdb05599d6815c019a57df8cdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:47:c1:52:04:ad:0d:be:ee:67:0a:64:69:
d8:2e:79:8a:48:9c:55:7e:72:14:0b:43:8f:b3:df:
ad:8b:f2:c4:de:8e:07:90:f9:54:5f:f6:16:0b:ef:
8c:6e:ae:7a:ef:0b:a0:60:e3:80:74:00:6b:2e:05:
a9:64:a5:5a:c7:a9:fe:39:42:70:43:b9:7b:9a:10:
c6:46:38:8d:8f:1f:05:a9:ce:bd:e2:c1:05:62:ae:
a4:79:6b:19:68:b9:61:cf:5a:13:a7:fb:75:9d:b3:
1f:c6:6c:1b:9a:ff:74:1c:cc:58:f1:0a:5b:da:00:
99:7f:03:31:fc:0d:ae:14:19:9e:62:30:9a:b4:d8:
4e:40:f8:f7:79:d3:73:22:66:8a:a2:58:04:d6:80:
50:a1:2f:8a:0c:10:e1:aa:49:48:cb:8b:13:11:3e:
27:3b:8b:bf:2e:a0:06:bd:dc:49:e6:c9:bd:00:34:
6c:7b:ce:c1:09:e4:00:29:37:cb:91:5e:0a:b5:61:
e5:ad:2f:a9:86:cf:f3:9c:d5:68:d4:96:48:f7:6b:
c1:b9:1e:0d:97:ed:70:3f:e9:b6:b1:97:0c:5a:d9:
d0:50:ff:ca:aa:5c:2f:48:a8:62:2d:1a:c1:a6:a3:
2c:ee:42:50:5e:2b:c5:f6:f5:79:18:c9:05:1d:ca:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:10:E8:65:25:0C:DB:05:59:9D:68:15:C0:19:A5:7D:F8:CD:F3
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:49:c6:7c:e7:58:fe:5d:20:76:91:e5:50:ac:4f:03:b0:25:
3f:1a:20:0e:a3:b0:16:44:1a:5b:cc:70:45:d1:f3:57:37:15:
5a:1b:27:70:63:4e:50:2a:ab:92:45:a2:b0:fd:2e:a9:3f:ef:
48:68:79:12:7a:1c:80:10:5d:6f:39:00:9c:82:49:3b:40:10:
64:70:1f:c9:49:83:87:51:33:f6:96:9a:54:9c:7a:04:13:d6:
67:d0:0a:5a:26:38:9d:2a:04:82:80:6c:7d:9a:00:a6:6f:11:
89:4e:71:98:c2:05:91:01:fc:db:2e:b2:e2:fe:e7:e6:d2:d9:
8f:75:80:a9:2a:72:43:71:e1:e8:d1:d2:42:f2:cf:2c:bb:9a:
6e:72:84:21:17:71:f8:f0:44:eb:eb:d2:3d:96:0f:f3:96:5b:
5b:88:a9:1e:5b:ca:41:26:d2:c2:97:4f:7a:49:45:71:b0:42:
a0:1c:2f:bd:32:aa:d1:83:08:ae:a8:52:3e:f4:a8:48:16:bf:
5b:b7:e1:bd:1e:f2:8f:27:8a:1c:f2:c7:f4:57:04:13:37:e7:
22:a6:72:9b:4d:d7:1c:ac:50:aa:57:46:f7:1e:27:10:5b:5a:
01:02:82:3c:77:64:3e:4c:6a:6c:c0:21:aa:f8:38:97:a8:70:
b6:f3:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:24 2025 by rpki-client