Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: CaLaBVFC2wUEkRlPGPwwkjrKSOEzfq0kM277r0fvioU=
Subject key identifier: EF:BF:C4:51:AB:01:68:E7:A6:6E:08:AD:F9:EB:4B:88:F1:11:33:5E
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 0198D404B2F8E34F715B7EBB278BF7421102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1042
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: Vzs+uEk3a1vIJHsEceWCfqr/wYpYCRlITyuiGyRjruM=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b2:f8:e3:4f:71:5b:7e:bb:27:8b:f7:42:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=efbfc451ab0168e7a66e08adf9eb4b88f111335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:da:fd:b5:8a:cf:51:60:d9:d1:80:4f:32:
04:19:a4:27:87:d7:2f:5f:13:be:c0:92:10:54:cb:
e4:d1:60:e6:0d:35:f5:06:3e:66:f8:c9:ea:f4:54:
20:48:92:64:49:e7:0e:86:0d:0e:7c:97:0d:3b:46:
92:38:b7:9e:6a:00:db:2c:93:a6:ce:0e:bb:77:21:
db:75:f5:ee:2c:23:8b:95:c3:fb:0e:48:ad:c3:82:
a2:c0:90:18:5e:1d:89:d8:e2:87:70:62:02:89:e0:
f9:c2:ab:85:9f:fc:99:f7:7b:1c:76:3c:32:f6:b0:
7e:67:9f:46:8c:72:d2:ac:f5:0d:d4:ca:b1:a2:89:
25:22:63:18:96:2c:af:27:98:af:d4:e7:98:56:09:
8c:d8:a0:6b:09:0f:51:dc:c7:50:f6:fb:b6:83:ff:
a3:99:63:72:d5:c9:2c:af:62:da:42:26:ec:0e:f0:
76:00:fe:42:33:de:b8:7e:ca:1e:4e:1b:ff:b0:63:
42:7e:16:c4:76:a0:95:a5:e9:0f:59:f3:89:30:d8:
4b:2b:b5:14:aa:46:61:dd:de:22:b9:78:c1:e2:cf:
53:76:5a:17:f8:9f:dc:6a:f6:94:ac:af:4a:57:b2:
44:51:2d:1f:23:c5:e9:ae:af:da:0c:a4:a0:0b:49:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BF:C4:51:AB:01:68:E7:A6:6E:08:AD:F9:EB:4B:88:F1:11:33:5E
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8a:c7:47:f3:ed:3a:73:3a:4b:f8:de:70:5f:bf:bd:99:8c:
70:6f:7d:55:73:b4:c6:92:7b:f9:01:1c:fc:6b:2c:4f:14:e5:
b8:a5:a6:c0:ee:89:32:29:6c:8d:03:c5:16:2c:3f:91:5f:e5:
f6:a1:88:cb:77:ac:0e:f8:12:00:05:a8:67:c0:e6:75:19:87:
72:f0:79:94:fb:a9:33:bd:1c:88:de:2f:2a:05:8c:70:91:07:
43:d9:06:ba:6b:b0:ec:9d:8f:38:ee:a6:42:9a:a8:c0:14:08:
69:05:b0:cd:22:72:4c:76:c6:d6:28:ef:c7:72:b3:56:ab:d7:
99:12:ad:5d:07:7b:b5:b4:df:a5:67:8a:a1:48:84:94:85:ee:
a8:a7:26:00:ea:e7:97:f6:18:66:c6:53:f3:6e:a1:c7:9d:24:
37:05:b0:4f:b0:ae:d7:36:34:b8:6e:a2:9e:52:4c:b1:32:da:
97:86:28:d6:a4:a6:95:45:e2:c3:25:b6:b7:c5:4e:0b:91:fe:
7d:a5:f3:75:47:0e:fd:bd:5c:98:af:a2:75:61:a7:45:4e:d8:
a8:a9:cb:ed:30:0e:32:1c:2a:be:c8:37:94:47:2d:37:a9:97:
90:b7:70:d0:f5:ff:d3:44:57:06:a7:65:37:2a:76:fe:91:62:
06:56:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:38 2025 by rpki-client