
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: Gw+mHHxz4y6XOqUDtowr39+qQJYoK6e1MYHB8q11Xa4=
Subject key identifier: 52:3F:F2:84:2D:C9:9F:DE:E9:9C:07:D1:6D:C9:22:0E:9B:53:A1:FA
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 0197BA0F8EBC2BA10AFB2B234F624CA5E34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 05:01:11 +0000
Manifest this update: Sun 29 Jun 2025 05:01:11 +0000
Manifest next update: Mon 30 Jun 2025 05:01:11 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: qchoHOtS5k+Gh5Ld1EEG+hSXznd5L8vXQDVebOjHBRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:8e:bc:2b:a1:0a:fb:2b:23:4f:62:4c:a5:e3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Jun 29 05:01:11 2025 GMT
Not After : Jun 30 05:01:11 2025 GMT
Subject: CN=523ff2842dc99fdee99c07d16dc9220e9b53a1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:77:38:52:a1:c7:f7:16:b9:15:88:0c:81:
6e:09:02:15:05:9e:84:b2:26:68:eb:4c:c9:9b:53:
17:b9:e4:5f:05:66:10:e4:4e:97:ed:ae:3a:19:0b:
0f:af:9e:df:ac:eb:1a:5b:fa:64:db:a0:79:15:ab:
33:2d:e5:83:34:ce:e1:55:1d:89:2b:f4:a5:4a:7a:
a2:6c:38:4e:93:7b:83:8b:a2:8c:21:e0:07:3b:17:
20:f7:d6:c9:bd:f8:07:0c:a5:a7:b9:2e:07:95:58:
de:f7:4b:ee:b2:0e:dc:e0:5a:dc:ad:96:44:0f:d8:
62:74:10:7d:06:33:d6:fc:fa:44:89:6e:4d:65:41:
fb:21:01:76:91:af:82:97:d0:2e:1f:c2:86:a5:80:
3d:98:0f:18:da:c6:b0:b4:e0:b5:50:c0:b7:90:5a:
45:fe:b6:9b:d6:13:4d:87:3d:a1:94:ff:ba:c9:11:
7a:cf:94:a2:6c:e0:8e:86:06:c1:d6:cf:32:3e:e4:
eb:fc:33:cc:3a:35:df:11:0e:6c:e9:4d:17:2a:87:
8b:bb:00:0b:5b:ea:74:75:1b:b4:48:8b:79:cf:58:
3b:92:22:77:8c:a7:55:3b:c9:bc:1f:0e:72:a9:12:
e1:8b:26:9d:6b:ea:5c:47:07:cd:d2:ba:8c:ca:c4:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:F2:84:2D:C9:9F:DE:E9:9C:07:D1:6D:C9:22:0E:9B:53:A1:FA
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f2:01:2e:84:87:87:57:87:87:10:c8:cd:7a:b6:83:7d:10:
2c:24:6b:70:c0:13:b3:a6:5d:12:8a:de:ae:bc:26:32:fe:6f:
b3:fd:8d:0c:5c:a7:16:23:76:10:12:2a:f2:38:20:1b:b2:04:
86:9d:0b:c8:f1:b4:ce:3c:61:49:d4:3b:b5:98:95:1e:fb:d5:
96:22:c8:a3:57:14:df:ec:9e:5e:fd:de:cc:76:cf:f3:a0:c4:
56:6a:82:0f:48:d7:f3:78:a7:43:45:f3:83:c9:22:34:6e:1a:
79:85:bd:ef:ee:0e:36:cc:84:67:de:33:fa:5f:1a:63:7d:ce:
d7:2f:2e:af:9f:0c:63:fe:f5:77:15:11:37:76:3c:9b:1a:0d:
6a:af:79:72:96:20:3e:a2:f4:43:d9:2b:c1:05:a8:38:b9:57:
a1:e5:15:64:58:e9:80:49:3f:c6:81:18:1a:96:82:6d:04:9a:
82:ab:7e:60:c8:b5:c0:93:bd:5e:da:ed:51:2c:9f:36:78:44:
9a:b8:ed:81:36:0d:fc:5f:32:c0:5e:14:12:44:e1:32:aa:47:
f0:51:a3:db:10:5e:be:88:4d:45:9d:83:06:38:43:67:0a:f7:
12:8f:bb:20:73:db:49:fe:aa:94:1a:ae:eb:7b:d1:ce:dd:4e:
f0:7b:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:54 2025 by rpki-client