Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: JcWPCBVFEMswHSbXqYPUNpR2GXbYbBfxK0JwBex+cX4=
Subject key identifier: 2F:3E:A6:83:DA:82:74:68:E6:B9:64:A1:4E:CA:45:9B:39:7D:1A:97
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 01984C9DAB6BD22E391B0361EAC5301FB41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 09E2
Signing time: Sun 27 Jul 2025 16:00:58 +0000
Manifest this update: Sun 27 Jul 2025 16:00:58 +0000
Manifest next update: Mon 28 Jul 2025 16:00:58 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: UQB/VwA4IO+p4B7a/xnkzIfVk2uKxs4S2xM2hbnNcK0=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:ab:6b:d2:2e:39:1b:03:61:ea:c5:30:1f:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Jul 27 16:00:58 2025 GMT
Not After : Jul 28 16:00:58 2025 GMT
Subject: CN=2f3ea683da827468e6b964a14eca459b397d1a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:58:76:34:6b:db:95:fa:c5:2d:1e:4e:b7:
3b:af:69:31:75:41:4a:6f:65:30:9b:34:45:0f:2a:
23:af:ba:39:5f:8f:60:47:f5:5d:e4:32:58:f3:7b:
0a:41:14:6c:ac:d7:5e:9b:db:3f:7c:09:73:09:38:
e8:c3:f6:ae:4a:72:37:6a:e0:ab:9d:8a:7a:c9:83:
7f:de:f7:59:f9:b2:22:24:4b:20:2d:53:55:97:21:
05:af:e9:f0:6a:f2:46:68:2b:dc:a9:60:ee:1d:3b:
bd:c2:b8:81:e4:b5:92:62:a9:42:3d:01:56:80:6e:
7e:a6:6d:e2:74:24:29:71:2d:78:95:49:27:57:70:
b4:71:65:b7:91:a4:fb:63:a7:71:57:fa:bf:15:cd:
d1:07:d3:96:ea:c3:cb:3b:b6:68:21:cd:3b:eb:d6:
d1:9c:2c:9b:a5:a6:3b:c7:e9:12:a1:bd:8c:e8:1f:
61:5e:7f:50:7d:64:50:2e:a5:0e:44:2c:0f:6e:9f:
38:87:2d:38:3e:c8:f5:c1:5b:55:69:94:40:21:df:
de:e7:74:43:2b:e2:b6:0a:ae:0b:f0:2f:15:01:c4:
0a:f4:cb:23:1a:83:d2:b2:09:5f:4f:fe:4f:24:cd:
03:4f:53:97:89:5f:3e:56:2b:b3:7c:3b:da:06:04:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:A6:83:DA:82:74:68:E6:B9:64:A1:4E:CA:45:9B:39:7D:1A:97
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:39:24:51:a6:f7:ae:4c:fb:db:b1:d7:8c:6b:ad:51:f6:
c3:71:a8:b5:1a:15:cd:ee:0a:1f:7a:6f:3b:76:eb:f2:0d:2d:
72:7b:a4:75:fa:ff:8f:c6:d9:5d:5e:0f:75:65:0e:21:c2:8e:
27:e2:b2:b5:d1:65:cc:d5:4a:81:bd:ef:1f:15:9c:77:4e:d5:
46:a5:dd:58:d6:ab:74:8d:2f:0e:c2:f5:06:d7:04:b2:d9:3b:
27:61:eb:47:6b:d0:6e:84:89:7f:ee:b5:ce:ce:22:d8:7c:54:
25:0f:3f:82:39:cc:b8:f7:58:a0:6b:7e:76:91:16:ef:82:31:
2a:4e:66:9a:0d:fd:d1:96:47:f8:3c:84:9b:5c:bc:92:79:ca:
c3:fc:5f:1c:d6:db:b7:35:fb:56:eb:fd:23:e3:cd:78:b8:85:
00:8c:65:10:47:96:37:56:76:a1:2a:3d:a9:dd:5d:80:86:72:
60:a2:c5:2f:ff:18:47:dc:32:11:ff:23:22:da:3b:58:ee:ec:
57:e6:05:47:bd:05:5a:ee:8d:89:9a:66:8b:cc:f9:7c:07:4c:
87:ab:53:13:ff:49:97:bf:c5:d6:ce:a7:a0:49:e6:de:0b:1b:
78:dd:05:bd:ea:6b:3e:e9:17:41:a5:89:c4:23:b8:06:fa:1d:
65:18:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:37:04 2025 by rpki-client