Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: +kbC/GwZWnNuSowQLiIBfNbIHDacn5ZZ6CW7zT4DFT0=
Subject key identifier: 0B:B8:5A:92:71:EB:95:B6:FD:F6:D7:EC:28:D1:83:F1:F8:62:7C:5C
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 0198D6606A9B2F4455EF0E74AB146095A99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 0450
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: kyoAdZsh+Rs1s7U63lC6+1Q8KQUjbRgl5GgXRHyMKlI=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6a:9b:2f:44:55:ef:0e:74:ab:14:60:95:a9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=0bb85a9271eb95b6fdf6d7ec28d183f1f8627c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:84:81:cf:08:f8:ae:db:a4:c9:6a:a8:15:
02:b6:e0:43:e7:64:29:d6:46:68:17:e6:c8:91:87:
84:88:9d:c3:0f:38:40:f7:e5:a9:cf:9d:8c:d3:38:
0f:07:f4:8a:cf:55:8f:f6:ca:22:52:7a:ae:24:01:
40:39:60:8d:69:14:c3:fa:ea:0f:ad:aa:ee:fe:0c:
1d:74:17:cf:50:6b:15:24:33:e1:8a:73:b3:b6:8f:
89:49:50:ea:da:d4:03:f3:88:53:80:31:a2:a9:50:
af:02:5b:79:60:83:34:c8:d8:05:eb:53:a4:7f:75:
f6:e6:58:bf:67:3b:68:09:ec:84:6a:34:b1:e0:96:
9c:98:ca:23:c6:f9:08:0f:89:11:3f:53:5c:ee:10:
29:d7:86:51:70:bf:72:30:b4:76:41:90:3e:cb:49:
16:5b:20:5e:2b:a2:b6:01:0c:56:57:de:54:2b:2a:
55:6c:ee:e9:25:d6:c1:33:db:28:07:2f:18:c3:81:
fa:57:81:9f:0e:cb:1b:21:e2:55:84:6d:ac:a4:4b:
97:1b:02:28:c4:e0:a1:24:7c:3a:77:cd:43:06:96:
75:68:85:5f:26:69:a5:19:f5:2d:c9:20:b0:c4:f0:
7f:48:5d:33:48:1a:4c:5f:ca:30:e7:5c:d6:d1:14:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:5A:92:71:EB:95:B6:FD:F6:D7:EC:28:D1:83:F1:F8:62:7C:5C
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:7a:38:fc:a9:8e:62:28:72:31:12:a2:f7:be:7f:af:75:
7f:cb:40:8c:1f:9a:ee:53:31:1d:c6:3d:6b:8b:67:01:ee:57:
ea:54:9f:fc:f0:69:92:52:a2:67:7b:a6:e2:ca:22:a3:d1:22:
a2:91:c1:a4:f3:10:e4:6e:38:36:8b:97:a0:8b:25:bb:95:1a:
2d:1a:c7:59:b9:ba:98:2f:e2:1b:cb:89:b8:bd:6c:4f:75:0a:
8b:87:53:e7:8a:a2:39:0a:6e:a9:04:96:3d:e6:a6:d4:ce:dc:
81:78:a9:06:af:7d:40:7c:96:eb:8c:ff:5f:e9:88:46:e0:e5:
46:97:9f:aa:7d:fb:d8:44:68:43:e9:df:6f:1a:c8:ae:d9:3a:
9a:f5:65:19:85:16:0e:1e:0c:05:8a:67:76:65:33:79:d7:0c:
3a:66:16:c2:a9:f5:a4:db:39:25:37:e2:58:1b:26:51:8c:8b:
2b:41:a5:9c:00:c0:c1:c9:77:cd:3b:98:72:f5:dd:58:49:0b:
5a:08:e7:43:0b:75:d8:14:a9:90:7d:33:db:f4:61:1a:ff:c1:
15:e1:aa:8c:bb:38:a8:9d:b7:50:17:76:87:cf:fd:44:23:c2:
f8:65:4e:d8:f6:72:d4:ea:0f:97:8e:5a:57:8d:ae:26:bd:c2:
9b:e8:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:06 2025 by rpki-client