Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: UTJ6fR5KsMjI2LlvJvKOxkQeCw/5QMmTv9gSg6NTdbs=
Subject key identifier: 9D:7F:CF:E7:2B:0B:1D:8C:20:97:DF:FF:7F:19:B9:DF:BD:69:D8:B5
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0198D4E0CD1C0174E4EF93B986B1BECBEC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: gyFw0FXvr54Frb86MKgTWSljRgxvtms/KwrK2lNk/4U=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cd:1c:01:74:e4:ef:93:b9:86:b1:be:cb:ec:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=9d7fcfe72b0b1d8c2097dfff7f19b9dfbd69d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:fc:f4:cb:3d:df:f0:77:4c:3e:d2:f3:2e:
09:7d:1c:98:45:51:b7:11:bf:3e:6a:56:76:30:4e:
fc:f9:ae:37:99:a6:d6:28:1e:78:01:8c:09:65:8a:
1b:45:73:5e:f9:5d:b5:fe:98:0e:62:45:28:90:bd:
65:52:59:7e:69:92:ce:6c:1a:13:1f:aa:86:07:9d:
c2:9b:39:de:30:55:0c:7d:5b:4b:e5:0f:63:84:fd:
db:ea:06:8f:98:3c:40:48:0d:64:45:07:b8:1e:d5:
11:65:67:3a:24:aa:ab:e7:48:f2:7c:5a:cb:a8:aa:
5c:6c:12:b7:fa:88:e0:4d:70:e0:7a:1b:94:d0:c4:
90:f6:90:43:06:f8:de:8d:20:26:64:c6:27:a0:84:
c6:26:ff:0b:37:c9:67:11:4f:08:1b:05:8f:2c:47:
4b:aa:cb:75:38:63:72:67:c1:82:ca:59:88:39:a4:
1f:f3:46:7c:84:fb:52:e6:de:26:90:36:8d:dc:ab:
07:1c:70:4c:83:13:b0:37:ed:dd:de:2f:e0:ea:47:
65:f1:66:89:b1:3d:7a:4f:7b:e4:94:6e:50:d5:e5:
43:4b:9f:e5:d5:42:6d:67:61:f0:46:77:75:81:cf:
97:04:6c:64:16:a6:8d:11:c9:cf:ed:89:e7:92:e4:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:CF:E7:2B:0B:1D:8C:20:97:DF:FF:7F:19:B9:DF:BD:69:D8:B5
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5c:a5:d9:78:a3:77:91:43:f4:a6:c8:4c:51:0a:74:73:dc:
3d:66:c1:e3:7d:b2:76:d8:97:ec:73:b6:01:62:d0:bb:1b:15:
23:f3:a4:60:c3:7b:6f:f3:3d:fe:3c:6a:ee:c9:83:76:2c:3e:
0a:7b:c5:ef:97:3e:05:7e:b4:66:29:38:1c:aa:2a:2f:e9:ab:
e6:83:1b:b8:90:b4:08:46:68:5a:2e:67:b1:a8:b4:09:8c:15:
13:89:d7:f3:a5:f7:18:1a:9b:3e:28:a6:8b:5d:67:ec:f1:55:
31:9b:1c:e9:bf:08:5d:e6:e3:ea:13:88:a9:15:14:6c:02:7c:
52:80:a6:c5:79:0d:5a:63:2f:00:2a:46:f5:16:7a:a1:94:60:
95:80:42:0d:6c:d6:16:58:d8:a9:6b:7d:93:6c:e8:d2:8e:bb:
30:3b:97:4e:07:1d:75:d0:60:45:0c:de:85:f1:47:2a:90:5b:
60:b5:fb:00:aa:51:dc:69:9b:32:c0:67:8a:52:b5:f7:86:b5:
36:ac:ee:be:14:20:e5:1b:d5:27:63:45:97:79:e8:14:db:30:
52:7d:9c:5d:79:e4:62:50:6c:46:9d:b3:46:a1:0f:ae:e3:3c:
25:d0:a3:f6:5d:c9:b5:a7:cb:50:d7:bf:e4:21:e4:af:b2:63:
9e:63:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:50 2025 by rpki-client