Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: GyAMboyA+cnO5AuNaFoJym86FVzEXc4uzqBv+FDWepQ=
Subject key identifier: C1:48:C9:6D:F9:0F:C1:EF:11:11:67:55:2B:24:47:B4:FE:C0:BD:26
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019849651925FC72A4441D2F925FD6BFD573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0AA0
Signing time: Sun 27 Jul 2025 01:00:18 +0000
Manifest this update: Sun 27 Jul 2025 01:00:18 +0000
Manifest next update: Mon 28 Jul 2025 01:00:18 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: rb+csaRHI+p6osm8ohR/VWkfeR0N9sKiRME6R6FDrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:19:25:fc:72:a4:44:1d:2f:92:5f:d6:bf:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jul 27 01:00:18 2025 GMT
Not After : Jul 28 01:00:18 2025 GMT
Subject: CN=c148c96df90fc1ef111167552b2447b4fec0bd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:a3:4e:37:d8:4d:76:0c:78:f5:61:f7:f9:
4c:b5:89:d0:8d:60:06:69:46:d7:bf:c8:59:5e:ec:
54:76:61:81:b5:9a:c3:e3:3a:f5:15:6e:fa:37:f2:
f5:20:49:ad:7c:97:2a:41:60:44:9e:9b:ec:00:39:
c8:78:b0:a4:eb:e9:be:8e:0d:5b:ac:06:56:78:51:
a4:93:eb:e1:27:57:36:29:ea:08:4d:49:90:72:46:
a2:05:11:0f:79:cf:02:f0:21:58:06:4c:57:a2:40:
38:be:4f:5c:eb:79:99:9c:0b:f0:f9:9f:76:f5:84:
a5:31:64:8f:4d:ba:c8:f9:d5:9a:35:50:fc:95:54:
b1:76:49:df:3c:c4:9e:da:99:f6:c2:c2:80:ed:d3:
96:af:20:10:45:1a:4e:b1:db:fc:f1:04:98:8e:b6:
64:5e:c8:52:d2:f7:bc:08:eb:b9:e3:de:76:b4:6e:
33:18:b0:6e:15:3a:d9:83:da:7d:01:84:e9:d0:db:
02:b0:8b:c2:85:c2:03:0c:81:ae:ef:3a:8c:4c:bd:
ba:0e:a9:ab:c2:d8:97:ba:85:1c:a0:a0:3e:b4:17:
a1:ff:72:c9:8c:ef:a2:e4:b0:a1:2b:c1:bf:b4:bf:
a5:da:a3:28:b3:a7:66:61:f2:84:91:b7:79:20:75:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:48:C9:6D:F9:0F:C1:EF:11:11:67:55:2B:24:47:B4:FE:C0:BD:26
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:6c:4c:8f:dd:7a:a1:e7:10:76:be:21:13:4a:4b:12:6a:
85:89:9e:7b:f2:38:ee:f1:38:cd:b7:fa:69:ec:77:77:0a:d6:
6e:86:86:1b:53:7e:f0:8b:43:de:79:b3:22:06:b8:1d:d0:d3:
42:4c:a0:94:ff:76:8a:af:a8:13:1f:e8:b7:af:2f:ce:f2:18:
7e:59:8b:31:b3:6f:6b:4e:45:b8:e2:41:fc:c3:1f:e1:06:8e:
2c:57:e8:c1:10:1c:df:55:8e:05:05:da:69:25:43:b9:f3:a6:
4a:20:f8:74:c2:15:02:d5:18:de:33:a5:cb:9c:59:11:f7:70:
00:57:ee:9c:a5:46:cf:26:f1:04:2b:45:43:42:62:1e:8e:19:
4a:6c:16:80:ff:8e:d2:e8:bc:58:fb:52:0f:e6:8d:d9:f2:1b:
e3:f7:09:22:b5:33:fd:45:62:6b:df:c7:ac:f6:db:36:2d:18:
15:61:6a:53:be:4b:f2:10:be:62:00:a6:bc:d4:e9:ef:2a:87:
e3:33:1a:2c:56:c4:48:4e:dc:63:d3:21:18:a1:78:f8:d8:a2:
95:58:44:a2:90:e1:05:80:c9:9f:cf:41:c8:d9:15:d6:39:7b:
20:97:e3:8e:3b:c0:f9:58:e3:d9:d7:bc:36:77:b5:2a:3e:97:
71:21:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:59 2025 by rpki-client