Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: BzB7Z1SArS/S4HHRuvwBe/n5awL4BXm2Ll3ZitwYJ8k=
Subject key identifier: BF:E5:F3:BE:F6:3B:6B:4A:84:33:F8:57:97:1D:5F:9A:0D:63:BB:0D
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 0198D5F1D0B239A6833DB98AD1CF9EAED0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 13F0
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: DGs+68/7yvPPWqQ+dZsux3xyPIn9J54WNSJ4GbB/V48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d0:b2:39:a6:83:3d:b9:8a:d1:cf:9e:ae:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=bfe5f3bef63b6b4a8433f857971d5f9a0d63bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:c0:75:20:0c:70:76:91:f7:3f:80:27:da:
fa:1c:a0:3c:88:03:6d:1e:20:cf:44:9b:71:91:cd:
43:6d:5e:8b:15:a4:9a:2c:1c:9c:d1:05:d8:d1:d0:
34:cb:54:2d:4a:50:db:ef:b7:3d:ae:bd:8f:d1:5b:
d1:f8:b2:ca:ac:1a:b5:ba:b8:b5:2d:a6:fc:cf:07:
27:57:aa:d9:e5:be:7f:da:40:cb:63:12:68:da:eb:
27:43:34:47:19:27:f3:d7:6b:71:46:29:44:b8:0d:
72:e3:19:53:48:73:94:72:c9:b8:21:bf:91:03:27:
bb:f9:86:26:56:1f:a2:80:9d:d5:73:e4:9f:d9:ac:
88:2e:2d:99:1f:12:c8:11:b5:bc:d3:7d:2a:82:61:
38:7d:61:c1:25:19:a1:52:d1:07:0d:ca:50:84:39:
d4:11:c6:80:7d:bc:fc:45:83:16:b7:29:cc:b9:99:
11:81:67:e9:29:fc:3d:e5:dd:3e:68:9b:02:38:82:
31:ad:49:22:45:39:15:c0:ff:d7:97:13:4a:9e:d8:
7c:1c:07:15:24:63:58:00:1c:70:f3:28:16:74:88:
be:96:bc:80:64:cc:b6:af:7d:17:2f:07:b2:7d:33:
fb:ae:35:9d:9e:05:be:b6:ee:a5:80:6e:86:e7:e3:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:F3:BE:F6:3B:6B:4A:84:33:F8:57:97:1D:5F:9A:0D:63:BB:0D
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:a8:73:77:d0:36:23:43:c6:e0:84:c5:d0:f3:62:79:80:
c4:a2:e1:b2:4f:61:08:1a:39:6f:a3:7a:00:db:2a:ae:4b:76:
5c:91:c4:e3:b0:61:0d:70:c9:83:fc:eb:9e:9c:eb:6d:59:49:
89:9f:db:fe:b0:1e:f2:05:81:3b:b3:be:5d:d2:b2:24:e8:58:
e1:4f:a9:74:cc:2a:32:e9:23:84:e1:63:51:21:d4:cf:46:23:
2e:f1:11:ae:d7:b9:03:d5:2c:2e:62:b8:fc:a9:ef:2c:a3:6c:
7f:aa:8b:79:2e:95:8b:44:1b:3e:82:22:b3:bf:03:3a:d5:68:
18:d5:6e:5a:05:1e:5b:d7:4b:41:5f:85:46:3a:a2:c6:1b:33:
4f:d3:7a:e6:ea:c9:31:f1:29:92:ef:0b:11:c0:55:5c:1a:16:
50:3b:ee:d8:ab:45:11:ab:da:42:8a:55:4c:55:31:ea:1c:1f:
04:89:61:6d:02:73:60:93:8b:a0:5e:2a:96:db:d7:cf:93:0a:
81:df:c6:30:2a:83:ac:14:81:91:95:46:f1:44:9b:1d:06:6b:
b6:4f:8a:9e:e8:d2:0d:35:b7:ed:53:bc:d2:35:9e:21:23:70:
ac:0b:a0:e1:73:76:6f:c5:20:0f:96:0c:42:9d:0d:ff:ee:53:
61:2d:b7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:49 2025 by rpki-client