Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: yMx1uJQuhY/fR2xg9IXoj2Oq5vhDagp0YHpTskW2G08=
Subject key identifier: 1A:50:82:CB:CC:4B:1F:F3:79:27:21:39:B0:44:FD:2F:7A:D9:6E:69
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01984AAE7B88998779654DF0F0812DCB71EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0F10
Signing time: Sun 27 Jul 2025 07:00:05 +0000
Manifest this update: Sun 27 Jul 2025 07:00:05 +0000
Manifest next update: Mon 28 Jul 2025 07:00:05 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 2CZmqnnmsLCJl48iKRSqyO6PuROQn3D1RwHSYAyFWVE=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:7b:88:99:87:79:65:4d:f0:f0:81:2d:cb:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jul 27 07:00:05 2025 GMT
Not After : Jul 28 07:00:05 2025 GMT
Subject: CN=1a5082cbcc4b1ff379272139b044fd2f7ad96e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:d6:f4:f5:22:ab:48:55:c4:c9:b6:d1:d5:
46:36:fa:71:8c:7b:7a:5f:1e:7e:57:5d:14:f0:6c:
dd:ff:e7:d7:d4:a2:38:f6:69:08:5b:8f:54:91:53:
7e:d6:9b:44:00:af:f6:2a:80:67:c9:a5:05:f7:ad:
f6:50:d2:c4:d7:77:41:3a:42:32:d0:7e:02:96:bf:
a3:20:68:bf:88:68:e5:9f:ec:74:21:85:2e:10:46:
71:7c:40:0f:8e:11:28:94:ec:1b:1e:58:6d:e9:69:
1d:d3:c0:8b:59:87:d8:58:2e:14:1b:dc:c8:85:de:
86:8f:9e:31:d8:e6:80:89:ff:b5:bf:26:37:32:4b:
ea:86:af:b2:1c:91:79:32:5a:af:ce:14:5e:2d:08:
d6:1d:67:b1:d1:e3:bd:b4:3c:5b:81:fe:b7:70:06:
e3:50:72:8d:71:1d:e7:61:d9:e5:7c:c4:13:f0:8e:
80:86:df:2e:38:ba:ce:ab:7c:79:20:07:c2:98:23:
6a:4a:da:94:89:fa:af:bd:cb:57:f2:90:d1:b1:a4:
d8:85:0f:f7:8c:4f:04:7c:19:0a:37:40:fc:20:7f:
55:4b:c8:f6:9a:e6:9f:6b:83:a2:b7:45:25:77:17:
48:a2:11:c0:61:d4:a9:11:e4:0f:89:99:81:d0:68:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:82:CB:CC:4B:1F:F3:79:27:21:39:B0:44:FD:2F:7A:D9:6E:69
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:6e:09:5c:0b:7d:45:e4:92:79:1f:35:40:bd:eb:82:b3:
95:ba:29:88:b1:80:80:95:5b:14:5a:60:1a:20:ca:cd:4e:eb:
1f:9c:10:79:5f:b2:07:34:5c:be:08:0c:65:28:8e:49:13:26:
e0:74:9e:35:d1:17:8e:de:e9:c4:6f:39:87:9f:da:c2:4e:ca:
2f:e2:54:00:d6:96:67:88:c5:17:2a:a0:58:08:4a:a6:96:f9:
2a:c8:07:18:12:a4:ad:d5:c7:bf:cf:4c:77:5b:36:2d:3c:82:
9e:f2:9b:88:8e:19:b3:5c:96:d9:10:49:f7:72:9b:84:61:ff:
09:53:dc:40:2f:92:ab:30:64:c5:89:71:e5:33:64:a2:03:38:
9a:99:b5:3d:09:cb:b7:93:1c:ad:b1:36:3c:bb:88:84:e6:78:
94:c1:c1:ea:ae:86:bc:80:df:72:73:6c:11:5b:35:a9:37:83:
a4:d7:b7:5c:61:f9:b3:2c:83:b8:b8:ff:b4:05:68:0f:97:78:
ce:66:50:b8:bf:cf:90:3b:d3:2a:54:a6:85:46:3a:55:9a:74:
a4:04:1c:2e:5a:66:ac:90:83:cd:0e:0a:0d:c7:51:65:50:a3:
84:e3:b4:79:81:d3:7b:da:8a:d1:a0:64:25:54:50:04:84:55:
04:89:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:59 2025 by rpki-client