Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: M894QdyZmbg4tDyaPSBwQN1MVjF22NtyntM1YUsjrZ8=
Subject key identifier: F2:87:18:E1:DB:73:7E:4F:D1:C3:DE:31:19:D5:B4:74:5E:80:C0:0B
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0198D473C9307C094862CEF4FA747CA90484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 123F
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: zN6vWfrbakXyfaSFWI0cSpmTYx3iZW2MVG7r+h5AYbk=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c9:30:7c:09:48:62:ce:f4:fa:74:7c:a9:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=f28718e1db737e4fd1c3de3119d5b4745e80c00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:c9:00:5b:cf:2e:68:15:46:5f:bd:24:38:
d3:f3:6a:3c:97:70:29:fc:ab:37:5e:82:76:88:63:
d1:c2:da:41:c9:94:39:86:c6:f3:0f:9c:10:f4:70:
b6:a6:45:34:23:dd:30:86:58:75:f3:eb:5c:ae:8d:
65:65:10:6c:24:0e:b5:f4:b3:27:6f:30:d1:7d:9b:
65:9a:93:69:a3:b7:df:72:0f:ae:cc:45:bc:7f:21:
49:86:18:59:d6:17:48:ce:f8:fa:06:30:fe:4f:2b:
d2:48:01:38:11:38:9c:b4:d9:ed:5d:cd:56:00:72:
15:2e:fc:59:cf:60:4a:e3:53:9c:43:04:3a:d8:69:
82:52:b8:84:c5:02:4c:ba:8d:08:c1:7d:49:4a:9a:
f6:a3:76:bc:e1:04:0c:11:fb:55:1a:81:9b:8d:47:
b4:ae:8c:70:43:b9:8a:bf:87:f1:9f:ef:e1:c4:f5:
cc:c4:4f:1e:b4:f9:83:8f:61:87:ee:16:a7:b6:1c:
ee:0c:48:58:8d:2c:c7:10:bf:b0:89:c6:2d:4f:94:
73:a6:21:c1:b1:38:f7:f3:ca:97:14:6e:70:76:a5:
58:59:95:8a:cc:2a:65:36:18:17:47:69:6a:e4:61:
72:c9:f6:f7:38:ad:d1:4c:26:19:7e:aa:46:d4:74:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:18:E1:DB:73:7E:4F:D1:C3:DE:31:19:D5:B4:74:5E:80:C0:0B
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1c:dd:7e:7e:d2:3d:b2:8d:6e:61:66:3b:9e:98:29:cb:66:
cb:d1:23:86:98:fa:35:74:fd:f1:0c:33:c1:17:c3:58:62:18:
1b:c7:2c:a7:f4:f7:e2:5f:93:42:66:19:c9:b4:66:39:c0:7a:
38:43:c0:77:af:10:43:ad:62:6d:79:2a:4e:a5:35:c1:f4:a7:
2e:d3:34:5d:12:4c:08:b5:46:af:93:29:38:61:35:c4:c6:a1:
90:f2:d6:a9:2e:dc:f1:08:ed:f5:5b:a1:aa:51:f8:be:b5:aa:
f4:cd:ac:bb:f9:09:25:3f:d7:5a:da:ba:96:8b:5b:a8:f9:c4:
12:bc:9f:57:4c:bb:d1:92:d2:5d:2b:b5:d8:8f:46:fc:76:86:
89:f6:4e:fa:55:6e:42:4f:48:dc:28:a3:b5:d2:9d:44:e4:59:
de:c3:88:19:b1:2d:77:73:3b:b0:ee:cb:31:22:7a:fb:c2:2d:
62:c8:2d:84:f1:44:ca:36:70:7e:88:44:df:d5:a4:9e:c6:28:
72:a1:05:cf:8b:31:bc:ad:8d:85:ba:87:28:ff:e7:80:c3:8d:
eb:9e:d1:bf:76:d8:e5:65:b7:89:3e:c4:9e:80:b3:87:61:b3:
0f:0d:5b:1b:2a:48:1b:9f:37:95:e3:e0:63:36:cd:47:fa:87:
1d:dc:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:28 2025 by rpki-client