Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: cKezvLsCPy2FxeHA+55ApWIbxHm/5nlhSXBew1Xp4IY=
Subject key identifier: 42:46:9C:79:7B:11:44:C0:B8:17:5C:1C:E4:D5:1F:32:04:1B:0F:12
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 0198D4DFCD52D49700D6ADB1393E0A79F31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: +r6rHWC/TlItUrpwOBKyELNFwlk6i2gZ55Azw5w4fjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cd:52:d4:97:00:d6:ad:b1:39:3e:0a:79:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=42469c797b1144c0b8175c1ce4d51f32041b0f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:99:25:03:db:aa:d4:07:34:10:1b:a4:f4:
81:33:42:6a:37:a4:b4:e9:54:9a:a1:03:5d:0d:2f:
36:41:6f:44:c4:fa:ba:26:a3:3a:f6:7a:7b:fb:6b:
bc:d3:8d:02:9d:50:e2:8f:ba:2c:a8:1d:4c:cf:ac:
2d:f5:85:c0:23:98:ae:76:6d:d7:22:51:f6:4e:73:
04:a3:0d:34:05:3d:1d:a4:da:f6:8e:2a:df:40:f8:
8c:5a:4e:1d:e6:93:a3:e4:16:6f:78:59:d3:37:d2:
6b:91:05:7d:6c:49:0c:c2:88:c5:f8:a7:bb:6b:4b:
64:de:17:b1:87:05:b3:69:2b:88:72:73:df:be:5c:
2b:15:79:d2:8e:94:1b:d2:7a:02:9d:53:35:fa:34:
0e:40:82:5e:a3:83:98:3f:da:94:dc:fc:ef:2d:cd:
b7:b2:e6:38:c8:57:4c:7b:0f:d6:7a:d2:5e:1b:e9:
65:a7:fb:64:85:a0:2c:42:bf:e7:01:28:ac:7a:67:
6a:d6:27:ac:d3:b8:0c:07:c3:e7:fb:7c:f9:a7:72:
dd:98:26:d4:ba:e4:1e:dc:61:36:1b:82:b3:98:be:
50:92:44:7d:1a:2f:ac:5b:0f:54:b9:fa:0c:58:b7:
a6:ec:29:be:50:d5:54:40:93:73:ac:84:50:78:99:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:9C:79:7B:11:44:C0:B8:17:5C:1C:E4:D5:1F:32:04:1B:0F:12
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:21:69:62:c2:1c:c9:ad:b5:89:4a:ea:80:e9:22:62:36:c1:
52:84:2f:cb:30:e8:64:67:cb:6d:a8:d2:d7:58:64:55:46:a9:
b7:39:a7:19:85:c3:16:b6:a6:23:7d:da:37:3f:68:8f:6f:fc:
46:8c:7f:ef:94:86:98:cd:16:44:61:71:f7:41:76:fa:c8:f6:
58:b5:a2:a2:5e:f9:04:dd:90:66:48:0c:d4:a0:15:1e:27:69:
12:45:72:81:93:56:6b:df:ec:95:fb:d4:e2:35:97:de:7d:ec:
cd:b3:a0:92:b2:a2:36:21:79:e2:90:f3:8b:00:88:34:2c:69:
f8:fb:2b:ae:31:37:ff:60:f9:ec:8d:70:a9:54:ac:ca:7a:29:
32:ba:a6:76:0a:98:c8:ae:1a:ad:e8:9f:4b:28:d1:bb:58:40:
cf:fa:a2:1d:cf:1a:26:b3:89:c5:7d:ff:5e:fe:a7:c6:0c:a9:
29:7a:8c:d0:9d:d9:ce:87:81:89:69:8e:05:4a:d2:22:49:e5:
30:9c:e3:7d:c0:fd:5f:f8:b6:aa:ca:47:4f:6f:15:d0:19:14:
a6:25:8d:6e:95:16:fb:a5:e4:23:a5:33:ce:b4:5d:b3:52:25:
1d:7f:85:06:de:e7:9e:dd:6c:f9:66:80:54:7e:70:6a:63:20:
c2:8b:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:57 2025 by rpki-client