Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: CcZ8v5SWJE9n1MOVd2v7XMNKo2PeYUe2xPQnmhcivHo=
Subject key identifier: 78:A1:0F:84:77:56:A8:9F:63:7A:CB:80:27:BB:4E:1C:EB:8C:10:ED
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 0198D84F3020E2D12A5CA3D7D5E07FDEF674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 0220
Signing time: Sat 23 Aug 2025 19:02:04 +0000
Manifest this update: Sat 23 Aug 2025 19:02:04 +0000
Manifest next update: Sun 24 Aug 2025 19:02:04 +0000
Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: I2e29mE/4TUlROasl1kTHij8iiDPX2ODFVPyN9ZjMXg=)
2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:30:20:e2:d1:2a:5c:a3:d7:d5:e0:7f:de:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Aug 23 19:02:04 2025 GMT
Not After : Aug 24 19:02:04 2025 GMT
Subject: CN=78a10f847756a89f637acb8027bb4e1ceb8c10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:3c:db:82:97:31:ed:00:f2:d1:a8:ff:ca:
c0:3f:2a:f9:3d:ee:aa:c7:2f:5e:5f:cd:06:61:76:
26:b8:f1:07:41:3f:91:a2:2f:6b:6c:6e:0d:1a:91:
c2:57:f1:cc:fa:f5:bc:09:2d:e0:4e:b3:a6:42:74:
08:9a:de:3e:23:c1:7f:21:06:21:b1:23:6b:b5:15:
ca:a5:a7:d2:90:0d:af:63:f8:8f:44:07:71:d1:08:
a6:e4:0a:79:1c:32:3f:47:96:9a:ae:07:45:0b:ee:
b9:f9:e0:07:c3:b7:0e:b2:68:82:2e:d8:40:32:57:
75:eb:bb:e5:fb:27:f8:f1:fd:ac:66:5c:e6:bf:6f:
26:f1:82:7a:39:17:af:20:b2:34:e7:81:05:a7:9a:
9e:a9:8a:4c:1e:80:64:0f:bd:24:65:33:78:61:5c:
43:33:5e:8e:88:cc:87:95:20:c4:12:48:8c:09:3c:
4d:e5:86:97:61:c6:2b:0e:7e:83:92:b1:ab:18:ed:
04:a5:80:14:a9:28:1a:09:82:1a:50:bb:b3:2e:11:
68:80:5b:02:e2:7c:df:73:a4:dd:45:89:d6:a7:da:
ef:18:9d:f0:d6:59:77:72:86:d1:5a:03:ba:bc:b2:
f0:2c:a9:5b:9f:70:62:82:ec:5d:19:c2:e4:bc:ea:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:0F:84:77:56:A8:9F:63:7A:CB:80:27:BB:4E:1C:EB:8C:10:ED
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:31:4e:37:b4:a6:80:c8:53:6d:18:c1:29:b2:ce:59:c7:f9:
a2:06:8a:31:90:fb:47:e5:2d:8e:12:a8:63:fe:f4:d3:ba:29:
e0:72:69:2a:45:b8:13:11:4a:60:3c:da:cb:00:12:d3:4f:24:
c7:be:5a:b0:54:b1:65:a6:29:6f:81:b8:57:5f:10:86:47:d2:
2a:ea:88:bf:29:71:c6:ab:fc:08:ba:49:0d:1e:d7:5b:ba:4b:
af:e7:1b:70:8b:1c:a0:db:db:86:97:25:b7:24:d3:da:fb:57:
68:ec:9a:3d:52:07:d7:30:b7:8a:87:18:53:6b:d4:6c:51:23:
49:6e:2b:da:32:88:e3:7c:5f:b2:44:c1:6f:0a:a4:dc:5d:14:
bc:08:75:e9:8d:97:1b:3f:72:52:53:d4:92:31:a2:2c:90:d4:
4e:43:6e:0f:06:ef:10:ba:78:6e:fd:83:04:a9:a5:3f:e0:b5:
de:9b:70:c1:f8:c3:63:31:c8:02:0f:f4:15:50:bd:19:63:fe:
ad:65:d1:16:14:0d:6e:36:ec:43:33:49:b5:58:22:45:0b:92:
43:23:f8:5a:02:56:3f:5f:0a:e4:e8:6a:f7:9b:34:fb:18:6a:
63:4f:ec:e9:4f:40:31:2c:18:e1:47:04:ec:f3:90:bb:88:0a:
68:21:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:32:14 2025 by rpki-client