Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: nu+rT3EY55nIga7BFTC2PtJO2033eaNEMHm1pJkNSMM=
Subject key identifier: 15:76:F1:87:D7:5D:DB:0D:FA:9A:5E:8D:B3:B0:EE:52:53:2D:05:38
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 0197B6A243555ADD8FF224FEB04C30011C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 018A
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: SS7eRLGFfCg4++tyvSuN2NnwVPrv+4GgdzK/7CE8o8E=)
2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:43:55:5a:dd:8f:f2:24:fe:b0:4c:30:01:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=1576f187d75ddb0dfa9a5e8db3b0ee52532d0538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:81:91:0e:d3:61:61:9b:20:85:a2:de:6a:
4b:e4:61:70:e5:e1:d0:c8:56:bc:d8:7b:2f:96:79:
54:e9:9c:95:89:38:ff:c8:44:f1:8e:e0:83:78:49:
8d:df:07:d4:45:d8:ff:47:0b:e5:41:d2:5b:41:c6:
e6:08:01:b1:39:1b:4d:cf:87:ae:c9:3c:1d:be:71:
42:58:ed:38:de:ca:bd:73:4b:7a:f6:a0:77:5c:e3:
f9:20:db:e0:5d:da:16:eb:41:db:39:27:a4:90:c4:
28:a9:10:17:bf:86:cc:f9:bb:ff:f8:6b:ff:fe:3a:
28:72:47:fa:19:b1:4c:90:cc:51:85:81:d7:d8:45:
e5:5d:a6:83:ea:01:cd:22:5b:7d:63:87:99:23:29:
f5:a0:58:60:4f:0e:aa:24:b2:91:ef:b2:59:b3:e8:
5d:32:bc:e6:73:9c:81:ff:0b:f6:c9:f2:8c:c3:76:
a9:09:90:1e:ef:25:b3:e6:f2:c2:3b:81:43:57:22:
b7:48:33:23:a7:4e:0d:60:68:ff:eb:f2:76:b2:bb:
cd:e8:30:5f:78:fc:24:32:8b:54:df:82:25:f0:7f:
ac:5a:8c:5c:c4:90:75:6b:6e:be:46:76:4d:4e:2c:
eb:61:d2:9a:2f:15:36:f6:76:d0:4b:88:0a:93:90:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:F1:87:D7:5D:DB:0D:FA:9A:5E:8D:B3:B0:EE:52:53:2D:05:38
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c1:d0:67:74:5d:ed:b4:7d:c5:cc:0a:c5:3f:2b:81:42:90:
63:aa:80:d6:9d:20:eb:ec:34:27:e3:89:53:4f:2d:00:83:bb:
79:19:dc:82:ea:c8:8e:97:3c:47:bc:7b:c1:25:5e:ff:7f:91:
78:d6:e4:e2:bb:5f:37:8e:6e:cc:77:28:a6:6d:d0:3a:fe:f6:
13:88:a4:79:e2:79:00:2b:d7:c0:ab:2b:1e:02:79:d1:e9:65:
a3:f1:f2:af:98:2c:3d:7e:42:0c:f0:56:a4:ef:a6:f1:fa:82:
46:0a:e5:36:fb:2d:f0:33:64:35:e0:99:4c:d3:7d:26:a7:ea:
aa:f0:de:ca:16:14:a3:96:b0:6c:94:9f:31:d0:74:d2:39:d1:
71:0a:c6:dd:89:bf:bc:0c:16:5d:8e:f5:23:f7:48:f3:1d:94:
f6:b7:95:d7:8a:e9:19:e7:3e:15:4f:91:b0:22:91:64:9d:4b:
02:95:0c:04:0b:88:23:e9:79:e0:dd:2e:0c:fc:8e:f8:5e:90:
79:21:4b:21:fb:fb:3d:8c:56:56:24:1c:e5:2d:c2:18:6d:6a:
24:65:9d:6c:d3:16:79:c1:a9:86:9e:45:04:21:81:3d:06:cb:
4b:2d:38:a4:25:76:76:b1:94:75:1e:bd:29:b4:38:0e:58:df:
ae:47:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:04 2025 by rpki-client