Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: U/bh0FO1aOX6LszUABq+qJIsfatGqN0+TVLvsaDiDNA=
Subject key identifier: 29:2C:EE:4D:E6:C6:A3:B7:A4:25:76:45:ED:E2:58:90:09:40:C8:A9
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0198D773B3511C3397725095405E631F4D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0E9B
Signing time: Sat 23 Aug 2025 15:02:20 +0000
Manifest this update: Sat 23 Aug 2025 15:02:20 +0000
Manifest next update: Sun 24 Aug 2025 15:02:20 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 7mn0umSw1NaALDqhbVvWP6G0rjStGUxd864WW+7xHoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:b3:51:1c:33:97:72:50:95:40:5e:63:1f:4d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Aug 23 15:02:20 2025 GMT
Not After : Aug 24 15:02:20 2025 GMT
Subject: CN=292cee4de6c6a3b7a4257645ede258900940c8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:79:bc:e2:06:8d:00:9e:3a:f3:25:17:31:
e0:e3:71:b4:47:a5:6f:f3:0e:d5:5c:26:7c:71:07:
c6:da:a9:41:2f:cb:85:0b:07:29:f9:6a:12:0b:66:
94:f3:25:43:a7:c2:ae:7f:14:f3:a0:0a:de:65:a9:
03:0c:fe:24:90:5b:63:1e:cb:d2:5d:32:b8:f0:af:
84:f1:00:87:c5:92:54:36:95:3e:a0:bb:59:4a:e9:
45:6b:c6:55:31:54:f2:bf:cd:7f:92:44:69:8f:9a:
09:b6:93:07:c4:49:53:3e:88:33:0a:1f:5b:d7:d9:
9f:d0:f1:cb:b8:9e:7f:3a:24:e3:a7:7a:c4:57:db:
23:ae:65:2e:b2:57:80:b8:8a:5f:85:28:a5:cc:7e:
b6:08:35:f0:30:75:c4:9d:fc:4d:ec:78:5d:8f:34:
9a:55:ca:ca:75:e1:1e:20:a3:4b:a3:42:4c:81:7b:
20:91:d3:f0:85:88:3d:58:30:d7:d2:23:61:7c:ab:
8e:b2:97:95:0e:fc:fa:b6:df:7f:b5:8d:09:3a:d3:
74:59:58:5e:b4:1c:cf:ad:6a:07:93:f9:bd:a6:da:
fd:0b:50:a4:c3:24:d9:b8:b2:1c:e9:56:02:32:8e:
ba:70:fc:af:f0:99:25:e6:63:5b:17:e1:4b:21:60:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:EE:4D:E6:C6:A3:B7:A4:25:76:45:ED:E2:58:90:09:40:C8:A9
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:21:63:04:93:f1:59:f8:fc:76:67:e8:15:3f:45:71:bb:
9e:72:e3:3d:0d:6d:70:ad:34:d5:2b:77:7a:e3:f9:e6:72:bb:
7c:d9:cd:b6:4f:6e:7c:65:5a:22:74:25:61:77:2a:2e:68:6f:
a1:e3:f2:18:ed:5d:b9:ef:05:ad:d2:10:02:6c:10:41:88:5a:
82:c8:6f:09:73:92:ac:6d:c9:72:c6:b2:c2:75:f4:00:e6:b8:
76:70:82:df:00:17:66:87:77:17:c3:a1:25:60:89:87:30:a2:
18:d7:e5:87:c1:a5:01:7f:fd:50:e5:49:63:ca:71:7b:c9:4c:
c2:89:a8:7e:4f:90:29:ba:86:ce:05:65:e9:ad:13:65:82:be:
54:11:4e:7f:1e:64:6e:a0:5c:7e:c6:b9:a4:43:75:50:cc:f4:
a4:64:cd:28:7b:3a:50:11:28:86:d6:e5:42:b5:97:c0:99:70:
da:90:b0:54:f2:62:29:52:ff:70:47:c6:bd:a4:49:61:6e:26:
9c:6e:c2:09:1b:5d:b7:dd:79:ee:69:b0:21:91:36:57:72:73:
66:06:84:cc:0a:da:75:db:ea:a9:ec:8c:14:88:d7:73:d5:f6:
41:fb:4f:aa:04:2d:13:df:0a:76:19:1e:e9:2e:a8:bc:dc:f2:
61:25:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:52 2025 by rpki-client