Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: 4PByhsJCm5p6rHKHk95oBr8PhJWbBq8xm3KHX2le5Ak=
Subject key identifier: 95:9B:EC:2D:BB:A5:C4:D8:A5:9A:6F:C7:0F:67:93:31:39:32:D6:6C
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 0198D54E4E554F3B11E550A68D53A894A625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 130C
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: N/NCpNrmeCqMO1huUwsYI6j6+P6gzOYd5VmpG7Nm57Y=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:55:4f:3b:11:e5:50:a6:8d:53:a8:94:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=959bec2dbba5c4d8a59a6fc70f6793313932d66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:a4:fe:eb:ac:fb:8b:9a:dd:2c:7b:ac:37:
27:64:2e:b6:c7:e1:62:bd:a6:4c:49:9f:da:2a:0a:
d3:24:e5:41:60:78:be:42:73:58:b8:b8:b5:ea:60:
c9:dc:07:b4:37:73:a1:14:01:74:37:7d:7c:f6:c5:
ad:76:f9:5d:ab:d1:dd:31:3d:5b:2e:2d:36:9b:39:
e5:99:d7:5e:ac:25:81:54:e3:b5:4a:f5:ba:55:9d:
a7:d9:6d:05:0c:ac:2e:ab:9f:59:1a:d6:38:71:97:
69:51:b2:3a:31:d2:1c:43:dd:b5:7d:30:c0:12:86:
ab:95:19:c2:42:07:79:55:5c:cc:72:25:23:9e:68:
7c:91:17:00:b2:b9:34:35:d5:8c:ae:eb:6d:01:15:
52:60:4c:25:92:8e:79:9a:44:d5:99:42:f6:1c:79:
88:f7:ac:9e:3d:20:ed:99:c8:05:86:40:62:88:ed:
66:d8:5b:e3:63:50:fd:84:ef:39:b8:ea:1d:c9:d1:
7c:31:e1:69:13:41:83:89:73:3f:a9:3a:74:5c:6d:
e3:83:2b:e3:81:4d:24:6b:ce:a3:af:8d:eb:fc:60:
a8:c3:20:29:24:04:9e:40:33:43:b3:0e:02:07:84:
df:59:74:aa:cd:5c:ff:86:f6:7e:cb:d0:06:d8:b3:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:EC:2D:BB:A5:C4:D8:A5:9A:6F:C7:0F:67:93:31:39:32:D6:6C
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1b:03:4e:d6:fe:2b:c4:90:af:a3:40:d3:0d:d3:5c:f5:eb:
82:6f:80:a8:ec:8b:90:d2:7e:07:1c:87:63:39:1b:75:a7:34:
06:42:72:dd:69:c7:a1:df:b6:a4:12:99:cd:4b:3c:a6:eb:43:
a3:a2:3b:c9:99:97:3f:8c:e9:e5:f1:b7:67:c5:b6:59:d7:33:
55:df:71:03:22:69:79:15:ef:3a:f8:97:96:41:b6:c8:c8:bb:
24:c4:c3:55:29:15:4c:4f:45:ed:a9:69:e3:eb:50:6b:e4:ab:
d4:4b:24:42:75:d1:6a:45:b1:10:25:61:77:b5:97:de:2b:bb:
82:86:15:b4:ce:94:8a:66:01:7d:33:fb:94:4e:1b:0d:78:32:
09:5a:44:00:cf:68:10:c6:ec:2b:f1:45:4b:0a:b3:87:86:23:
cb:91:19:29:f8:b2:b2:84:7e:d1:f4:32:2f:95:2e:e9:4d:c3:
74:bf:a1:9d:70:ad:1c:a6:7f:58:08:3e:3a:bf:67:49:a7:3e:
4e:f7:28:0e:bf:37:1c:06:c4:2a:d0:48:a0:be:fa:7d:e4:a5:
c6:03:99:c2:84:38:0c:24:4a:e0:11:10:10:c4:c3:5f:1b:f2:
bc:95:a7:99:f5:41:21:57:4f:b1:a2:89:65:f1:b9:d8:b1:9f:
b7:09:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:25 2025 by rpki-client