Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: dx2ydMnu1vIi1r704WTFOr+CjWP93a4ga/nEMamJ1ns=
Subject key identifier: FE:35:49:F0:93:7A:E2:FB:99:D6:76:D7:0A:B7:5B:5F:3A:5D:0B:3A
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 0198D4728D7CA5CC6E1355F42762997025AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0CB4
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: 9cEvXYVcBJeRVXoK10hhOCyNhJY.roa (hash: ihTe2JjgXGvlLA7K+HxYQQd7iWcLoXsDNyag9kYHBGk=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: HHObrjKRJbLdpSYCpk9oXSWeW1LUnPAjd0b8pCFXiZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8d:7c:a5:cc:6e:13:55:f4:27:62:99:70:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=fe3549f0937ae2fb99d676d70ab75b5f3a5d0b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:1d:12:22:51:4c:45:dc:1d:6d:4c:95:42:
25:e4:5b:67:b0:50:33:64:0a:c7:97:4f:77:d9:03:
0f:0a:78:d3:ce:64:d5:67:ae:96:42:6d:1b:72:40:
e3:c6:4b:de:c0:72:d0:eb:4b:a2:0f:9d:35:3c:cd:
ef:8e:db:f3:05:00:9c:bc:6f:7d:fb:6b:31:68:b0:
4b:48:c5:11:98:2d:c7:5f:a0:af:d8:b0:26:b0:7c:
61:1b:54:27:c1:a5:62:dd:5a:ec:6c:03:8f:28:de:
d7:cb:9b:f8:f2:9d:3e:82:3c:dc:fd:01:2f:10:08:
40:a8:cd:b0:a6:62:a0:b8:2a:be:80:7e:2b:35:f9:
8f:01:4f:a9:ee:ac:90:8e:a9:68:0f:b0:f7:d3:8a:
aa:21:85:4a:4c:97:69:b5:70:d2:4f:2a:26:6d:88:
96:4e:50:a8:0d:a5:38:93:e1:d9:53:33:8d:71:47:
73:bd:6c:c3:b6:5b:15:16:c3:57:6f:8b:93:ca:58:
d3:80:44:33:c4:2b:a1:65:2b:af:59:c2:73:08:c6:
21:ab:45:69:4d:ca:4c:67:61:43:08:e6:3d:3a:51:
c5:a6:7e:4c:58:53:23:ab:57:9e:d8:2f:b0:84:c3:
16:53:9d:2f:26:51:91:a8:8f:25:3e:d1:2e:31:48:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:49:F0:93:7A:E2:FB:99:D6:76:D7:0A:B7:5B:5F:3A:5D:0B:3A
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:84:ec:7d:f1:ff:bf:c2:3f:ca:78:7f:5c:5a:a7:e2:be:
70:d6:f8:31:28:e3:95:68:97:f7:f5:ae:f7:d3:a3:64:3c:ed:
10:c5:04:d8:f1:82:d0:13:f8:e3:5f:63:44:38:2f:0f:a2:73:
67:42:64:aa:2b:61:66:12:e8:4e:73:b3:03:03:67:d3:af:ce:
da:dd:f0:a6:b5:b5:8e:7b:a6:62:93:0c:d0:e1:6e:2f:96:60:
42:4d:c7:34:43:17:be:63:58:e8:76:6a:11:23:70:d8:a9:06:
ac:7b:7f:67:8c:a1:01:3f:34:4e:1a:80:11:9b:73:08:66:cc:
fa:2b:14:c8:40:7b:b5:0f:d5:a4:00:4d:1a:b8:96:58:ab:d7:
e0:08:4a:59:ca:29:87:d3:6f:b7:0a:2f:a9:e0:10:70:21:15:
9a:73:0c:55:97:a2:8b:c4:90:5c:66:6d:23:af:6a:31:d8:3a:
94:80:88:83:96:b3:0a:cc:49:42:56:db:07:f2:7c:14:08:df:
b6:a4:c6:c3:2c:fa:c5:3f:40:0a:95:22:38:7e:ca:4c:5b:2c:
04:81:e3:1b:16:5a:75:09:35:b8:ae:22:92:4d:c0:87:9f:5b:
e7:3a:9c:58:46:49:fb:4a:6f:69:4c:c2:cc:49:46:00:b0:7b:
53:f4:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client