Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: 9BUKxz3AZ38TsXsYlVaYpnHRPW51nwzFXrYHdrOXt6s=
Subject key identifier: F0:F9:E3:12:CD:3A:B7:30:95:C5:9D:29:CB:D9:32:91:52:6D:AF:6E
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 0198D583F0E2F7B695B9FBB1F0E7FF29387E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: ITcmIMvWjMoP1m1JslHr6WtpRSZzSyjOTQPTfw+lmfA=)
2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f0:e2:f7:b6:95:b9:fb:b1:f0:e7:ff:29:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=f0f9e312cd3ab73095c59d29cbd93291526daf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:13:1c:a9:a0:56:59:58:2f:9e:68:9f:d9:
f6:fc:2b:e5:f7:8d:f7:ea:66:08:84:d4:2a:8a:81:
fe:c9:c5:fe:b3:85:22:22:d0:17:b4:31:00:84:8c:
0e:a4:26:6d:b4:6e:e3:58:0d:a5:28:e2:05:12:c7:
c7:71:b6:8f:c5:8e:ce:a2:54:7f:16:53:3c:7a:06:
25:f7:ce:50:62:0b:8e:2d:78:af:5a:fd:28:ca:0a:
72:93:9a:84:66:51:91:71:f1:7f:3c:6a:c3:52:f1:
93:92:b0:aa:0a:47:f5:77:26:cc:db:e7:27:09:59:
eb:1f:73:9a:d1:99:4b:59:f3:fe:9e:2c:e3:cb:7b:
86:a6:4a:f0:8a:f6:a1:47:5b:02:d3:e3:94:62:d7:
93:d5:ba:c8:3e:2a:12:af:29:54:00:84:3d:80:09:
31:f5:18:b5:33:7d:0a:d5:14:e1:eb:02:bc:13:20:
7e:77:c4:05:2e:6b:71:1b:47:bd:80:7e:0b:aa:5a:
d5:bc:aa:33:46:f5:0d:25:74:c3:c5:13:30:ac:9d:
ce:1b:36:3f:4b:c0:8a:a3:8d:cf:f5:e0:5c:4a:0d:
2b:94:73:ea:4a:3f:78:cb:12:5e:bb:e4:38:04:da:
be:63:35:5a:7b:90:6b:98:6d:84:86:b8:9c:e5:63:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:E3:12:CD:3A:B7:30:95:C5:9D:29:CB:D9:32:91:52:6D:AF:6E
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:12:1f:db:80:72:81:68:9d:b0:4c:45:23:84:aa:10:8c:
d4:ea:f7:a5:92:e9:7f:be:d5:c0:14:18:a7:bc:6e:ae:23:65:
d9:5c:fe:5d:8a:b3:08:81:cd:6e:b7:95:3a:e1:7a:c9:6d:d7:
c7:8d:3f:b9:14:5a:8c:b8:00:d7:44:a7:07:33:43:d7:bf:1c:
e3:8c:d3:b3:de:7e:cd:36:58:1e:8f:4e:80:f0:60:0f:b0:d7:
3f:30:0f:3e:b5:a6:c2:86:4c:55:ae:25:aa:32:4c:9e:a0:f4:
87:d1:61:77:c2:2a:75:8a:65:6e:b8:41:47:c6:ac:0b:1b:7f:
f9:70:c2:b3:26:2a:d5:dd:2b:87:2c:2c:7b:0e:7c:ea:b0:7b:
b9:f0:ab:8b:5f:64:7f:2e:5e:b6:7c:e9:16:33:64:b1:0c:46:
fc:19:91:42:ed:9f:83:2f:d1:dd:27:5b:51:99:6c:b9:f6:8b:
21:11:89:7c:bb:d6:45:d3:53:de:80:b2:c6:80:58:34:a6:fd:
14:2d:28:0a:a4:bd:89:1e:f7:6b:c8:38:98:12:c9:48:1e:f7:
e2:d8:91:6a:c7:18:87:48:d1:79:25:aa:ae:d7:c8:df:0f:d0:
d1:19:df:45:08:73:d4:5d:6c:af:1c:85:3f:5d:55:5d:36:7b:
97:0b:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:29 2025 by rpki-client