Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier: SNtC4DZ8lFnpymIZOkigqAI1wvmuJt3bmUjBVlWoM2M=
Subject key identifier: A7:A1:83:0A:E5:CB:8D:46:75:FE:D4:C0:9B:E8:88:AB:13:D0:54:A7
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial: 0198D4746C38F8FB823941AD38B660740E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number: 08D7
Signing time: Sat 23 Aug 2025 01:04:16 +0000
Manifest this update: Sat 23 Aug 2025 01:04:16 +0000
Manifest next update: Sun 24 Aug 2025 01:04:16 +0000
Files and hashes: 1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=)
2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: +Xa1XOr2+0noylc6BwDTPyQAW7ZVuLWrjrSXUAzTvmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:6c:38:f8:fb:82:39:41:ad:38:b6:60:74:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Validity
Not Before: Aug 23 01:04:16 2025 GMT
Not After : Aug 24 01:04:16 2025 GMT
Subject: CN=a7a1830ae5cb8d4675fed4c09be888ab13d054a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:7f:c7:8f:54:10:5b:ce:4d:a0:9b:7b:3e:
0b:35:db:f1:10:d4:3b:6a:b5:ad:4e:2e:8a:32:7d:
22:fe:2b:da:a1:82:e5:fc:ac:d6:28:d6:e7:63:9b:
5e:d1:c5:29:23:d2:56:43:7d:5f:8d:7a:ec:47:d6:
13:3b:0d:cc:2c:81:44:51:b5:3f:5c:a4:86:f3:1c:
49:e2:7a:8c:86:cb:38:6e:bc:32:77:f7:b9:18:6e:
20:32:51:11:49:99:fa:f3:ac:de:6c:3a:87:bf:fe:
d5:d6:03:f5:94:a5:ae:61:c3:50:dc:f0:5f:e2:7a:
2f:c4:1b:45:5b:9e:8c:a6:23:bb:1b:9d:eb:8b:2d:
f9:44:d8:af:0c:fe:3b:ef:93:9e:2e:77:e6:57:11:
0d:5d:23:bb:44:0d:99:7e:01:89:ab:76:20:10:9d:
1b:c8:a3:a6:2a:ef:3e:27:7d:ac:4d:8b:7f:98:89:
76:48:6c:6b:50:42:ef:74:a7:c8:bf:8c:c9:e4:fe:
1f:87:f1:6e:c9:02:97:8c:25:06:94:10:2d:d2:3f:
36:3e:bd:12:ba:d4:cd:e6:e0:1e:30:64:46:af:6a:
44:07:f2:1b:7a:c0:bf:51:a5:2f:a6:8c:7e:7d:71:
8a:65:84:8d:f3:cc:55:03:46:f3:bf:31:fe:f2:0d:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:83:0A:E5:CB:8D:46:75:FE:D4:C0:9B:E8:88:AB:13:D0:54:A7
X509v3 Authority Key Identifier:
keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:48:3f:72:38:6d:52:c4:f7:83:99:bc:ae:7f:e4:98:f3:
76:50:59:65:7f:df:61:0c:a9:a7:77:ad:44:28:15:60:c7:66:
49:14:32:d2:75:a8:46:0a:da:0c:7a:b1:a6:b3:79:bd:e2:79:
3a:56:79:db:56:70:ff:db:e9:c5:ac:fd:ce:66:8b:78:90:2a:
51:a0:6c:a9:20:74:7c:d0:c0:3f:4e:43:ff:11:bf:29:09:5c:
b2:ed:ae:51:85:f2:8f:87:93:1a:fd:77:25:c4:a9:97:d3:f0:
2f:3b:5f:be:f7:b2:66:a0:71:3e:0a:ef:65:fa:a6:fa:bb:1f:
3e:df:15:6f:17:85:14:d5:32:22:d3:d5:51:5b:79:30:3b:87:
35:b4:e9:2d:a3:4e:42:49:59:1e:27:65:86:d4:9b:36:a8:8b:
a8:99:09:7a:12:2b:ad:2d:58:9b:9d:81:a3:ce:03:44:5c:92:
58:95:6c:cb:29:b4:31:52:8e:c5:ce:0d:09:1c:89:25:8b:af:
af:0b:1e:ea:70:38:24:c1:0c:c8:7b:c7:fc:7d:d9:29:e6:17:
07:d3:cd:cf:ce:98:c7:c8:32:7c:aa:27:08:9e:c1:54:4f:d6:
97:a8:79:2f:a6:e0:1a:3c:d5:85:95:db:0b:5b:46:fb:01:a5:
8b:cc:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:25 2025 by rpki-client