Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: 21xPkVLSx/zc+Ok3zXt0skuNGdL3g8epAwvzvQ8CEI0=
Subject key identifier: 75:67:11:E6:5E:AF:09:FA:0E:E9:F6:9E:F0:64:1B:2B:59:CF:25:11
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 0198D583EC31E94FDC28B042033A62D7F9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: A4
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: pkbiPrhr8xKP8wdFsJS8Dgxxf8tZ6sujFest/Iu929s=)
2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ec:31:e9:4f:dc:28:b0:42:03:3a:62:d7:f9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=756711e65eaf09fa0ee9f69ef0641b2b59cf2511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:43:73:23:9e:6f:d7:42:04:3a:33:36:51:
ed:1d:24:82:93:fc:81:1d:ea:71:0c:b7:b2:da:9f:
e5:80:73:9b:09:05:6d:ae:98:ba:b3:c4:e4:e7:80:
b6:bb:70:10:b8:30:37:dc:e3:86:81:dc:53:10:fe:
e2:f7:e2:e2:53:7d:41:16:ac:a5:db:4d:ec:99:e3:
ae:04:18:48:7e:0a:22:4a:88:13:96:55:61:49:a6:
60:7a:ab:14:a3:32:60:5f:bc:9b:e8:b4:d0:4c:82:
2f:9e:a1:ce:a4:49:e9:00:71:83:56:e5:0d:d1:89:
2a:46:92:f1:da:69:d0:ff:a3:fe:b0:a5:ff:79:ad:
ea:1f:7d:c7:e3:9a:29:8c:c5:50:bd:40:23:9a:14:
9e:d4:4b:aa:3e:cf:40:5d:3d:16:02:95:87:8b:49:
8a:b8:06:fe:2f:67:12:d1:65:59:37:fa:7f:46:5a:
fa:fd:73:c8:ef:bb:99:9c:b6:c1:7f:f6:de:cc:58:
f5:06:ad:3a:11:cf:f4:f1:7f:3d:de:6c:04:43:ff:
ac:a9:ac:1f:f3:41:80:30:bb:29:8f:66:d7:3b:a7:
94:8d:2f:29:5c:67:2d:d6:ed:15:7b:55:73:b7:09:
cb:97:10:97:11:97:40:77:86:61:f6:1f:48:96:46:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:67:11:E6:5E:AF:09:FA:0E:E9:F6:9E:F0:64:1B:2B:59:CF:25:11
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:8a:6c:bb:fd:01:4a:ac:94:3d:a0:f9:1c:15:d5:f7:50:
49:12:9f:ed:f2:1f:76:8e:e1:25:7b:62:4a:5f:56:07:04:ce:
db:85:b3:ee:77:e8:0a:ea:ee:a1:5a:93:2a:4d:b7:e9:05:4b:
21:f0:66:6f:72:28:ad:01:f1:ba:8a:1d:86:3c:4b:eb:13:bc:
33:bb:af:9b:3a:69:02:ca:c4:b9:d4:55:72:5e:71:7d:ef:e7:
18:81:bc:08:2e:37:e1:0c:f5:d3:d0:71:b4:e0:d8:13:c4:b3:
76:19:30:31:30:d4:8f:3b:8e:35:39:13:ad:76:4c:9d:7c:80:
a4:c8:a0:99:7a:63:1d:62:b8:cb:46:d1:13:f1:bc:5d:5e:a3:
46:97:c3:e8:a5:03:c3:a0:23:0d:9e:0b:b5:e1:de:3f:89:b9:
b2:84:24:6d:5c:30:fd:6c:fa:43:fa:f1:aa:83:1e:26:cd:d7:
9a:97:6b:cf:e8:59:51:0a:6d:23:d7:8e:d4:a0:ea:eb:76:a6:
9e:ee:fd:52:d5:50:aa:8b:8a:09:65:e6:f7:95:c7:7b:39:8e:
31:32:f7:71:5c:cb:54:16:36:d1:8d:b3:d5:bf:2b:c6:1e:37:
b5:19:5d:5e:b0:70:5b:47:f1:0e:79:88:50:38:95:15:65:6d:
f9:c4:d3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:20 2025 by rpki-client