Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: o+Ohb9Wy68EF/lmaW9A29JYNSpYyT/4QBLbdrhpZX0g=
Subject key identifier: BF:29:58:0F:E1:9A:23:52:61:59:22:AD:AE:61:FA:F5:BE:E0:46:27
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 0198D6CD76EDA63EF60131955F6B80CB6FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: yKLjru4uWuJbjMF2Xy085Q0J2gKCUAKCUP9BMJqvQO0=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:76:ed:a6:3e:f6:01:31:95:5f:6b:80:cb:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=bf29580fe19a2352615922adae61faf5bee04627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:eb:01:8b:79:4a:95:e6:05:68:5d:30:6c:
37:87:e8:2b:76:60:61:9c:d5:ac:45:ba:6b:57:d3:
ab:d7:96:9d:71:ee:5b:86:fa:e9:00:48:15:02:c1:
2a:0f:69:84:09:52:99:87:b7:18:69:86:c4:6f:a9:
27:00:ab:32:60:88:00:81:e8:44:24:70:e9:a0:23:
89:82:d6:bb:cd:64:72:e1:b4:bc:9a:79:21:71:47:
ed:eb:98:55:91:51:56:2a:86:2a:a4:0f:23:60:cb:
d1:21:a0:23:6a:ba:a6:7e:77:20:b1:44:39:8c:78:
05:3d:60:4b:c4:91:a9:7d:43:35:f3:02:48:3a:3e:
d4:cb:55:84:f7:f1:d2:4f:69:5a:df:4b:4c:b0:2a:
b0:5d:3d:15:0f:52:13:4e:07:97:70:0d:e9:07:56:
83:06:de:9c:98:44:46:95:54:d9:df:99:47:4b:0b:
4f:66:aa:2e:4b:fc:0a:1c:1b:fa:12:ab:7d:d6:12:
93:50:29:7a:89:b2:a4:07:39:7a:03:da:ac:a2:cc:
4d:23:d0:46:57:4e:96:ec:15:5f:cf:f1:95:cd:6f:
b3:24:5e:28:a4:a9:fe:9e:a4:8b:b5:d4:38:9a:cf:
1d:b5:e7:03:f1:49:1d:72:9e:84:82:57:e2:b6:77:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:58:0F:E1:9A:23:52:61:59:22:AD:AE:61:FA:F5:BE:E0:46:27
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:cf:bc:35:e0:2f:f9:09:30:ed:6f:7e:37:a9:63:15:56:
61:19:69:12:ec:61:be:8c:fd:d3:f5:38:c0:c1:56:cc:90:92:
a2:ec:52:a7:e0:9d:d9:1a:85:42:44:ec:ba:ee:89:55:f2:0a:
c8:17:5b:15:2e:2f:63:fb:6a:10:3f:a3:5f:3b:b6:2c:f5:87:
d9:4e:6c:22:03:cb:66:f4:13:30:c7:a7:a2:58:89:22:cb:7f:
7b:c6:35:4e:5a:8d:a8:20:9f:97:7b:f6:2f:81:6a:c2:70:5d:
ba:56:62:5e:fd:10:1b:05:9b:ba:82:2f:84:03:82:18:db:ab:
7c:3e:a1:be:90:9d:7e:92:5e:2d:6d:11:2b:2f:c1:49:be:ab:
54:42:7f:32:ce:d1:d9:1a:c1:6b:f9:ea:8d:7d:03:19:fc:24:
d5:f9:a1:62:e7:05:a3:5e:0b:92:7f:05:02:4c:dc:01:79:41:
f6:29:aa:e2:08:4c:20:2d:2b:58:44:b4:3b:d7:3f:bb:16:8e:
a6:24:54:8f:b2:8f:36:19:0c:cf:45:46:19:40:cd:00:b0:3c:
0f:2a:c1:3d:87:c8:fa:a8:b4:b7:7e:a8:5d:62:5a:82:9a:71:
c0:fc:c3:de:e0:85:95:91:25:cc:da:88:3b:1d:d6:0b:70:e5:
49:14:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:22 2025 by rpki-client