Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
File: KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft (raw, json)
Hash identifier: Jzvsxob+qMJCRrFW8X4GdP/z5tpj0mXYN0TDSpagQPs=
Subject key identifier: 44:C3:C5:63:B6:DC:2D:C0:E5:03:01:A7:58:5D:8F:AA:69:4B:C0:F1
Authority key identifier: 28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
Certificate issuer: /CN=28843db96e4f459b87df8c279057eed69bb9b862
Certificate serial: 01984AAEBEB3672DBEDA7CB49F9BD4ABAE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:22 +0000
Manifest this update: Sun 27 Jul 2025 07:00:22 +0000
Manifest next update: Mon 28 Jul 2025 07:00:22 +0000
Files and hashes: 1: C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa (hash: aAHqvnwWD8oItQ342R5b0KuB97GMKDOjFhJ8IpWVibI=)
2: KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl (hash: o4ysPrSw4NnHGvhH6hlvoD5d+60BJchtpZ6/1d1mLog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:be:b3:67:2d:be:da:7c:b4:9f:9b:d4:ab:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28843db96e4f459b87df8c279057eed69bb9b862
Validity
Not Before: Jul 27 07:00:22 2025 GMT
Not After : Jul 28 07:00:22 2025 GMT
Subject: CN=44c3c563b6dc2dc0e50301a7585d8faa694bc0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:19:18:00:72:c2:ce:aa:9b:ba:9b:1a:a6:
b0:e6:58:a9:9e:6b:72:f6:21:0e:fc:b7:08:57:eb:
1c:d5:36:18:c7:4c:db:ea:ee:e8:ec:31:9b:08:5c:
ed:62:65:41:61:e0:f2:df:e3:58:c2:45:de:7e:30:
67:e1:07:d4:ba:f4:4d:28:f8:71:ff:9c:45:83:52:
5b:3e:84:ce:50:05:1c:2a:49:ea:10:a3:83:d2:0d:
7e:67:da:f1:16:00:b0:0a:06:e6:37:73:be:6b:22:
e5:95:30:30:b9:b9:f4:a0:8a:30:31:7c:11:5d:cd:
48:d5:3f:64:2e:a6:89:28:18:37:f5:c0:4e:09:5a:
0b:6a:94:ee:17:e4:3a:29:65:ce:90:6d:50:6d:70:
02:96:6c:38:d4:fc:4a:5a:27:6f:3e:5c:db:55:87:
76:74:53:00:72:35:54:02:14:80:6f:f3:2f:73:28:
b9:9d:bb:0b:3b:4a:eb:44:95:c7:31:af:71:ef:55:
c4:ba:14:3b:5e:d1:79:7f:ce:39:5e:25:96:23:e4:
a0:b4:75:7c:05:72:93:06:ea:b3:0c:0e:12:73:2d:
68:5f:db:ed:81:bb:99:cf:0d:63:e2:4a:2b:2e:b6:
ec:bc:2f:3c:92:cb:49:15:75:8d:df:f2:0a:9d:88:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:C5:63:B6:DC:2D:C0:E5:03:01:A7:58:5D:8F:AA:69:4B:C0:F1
X509v3 Authority Key Identifier:
keyid:28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8d:00:7b:fd:40:56:c2:e1:41:8f:7d:2e:a6:96:88:54:39:
9c:1c:90:e9:ae:6c:cc:5f:95:a2:ed:8b:46:ea:60:d8:6b:4a:
4e:d0:9f:46:81:84:35:5a:c1:87:3a:81:57:5b:21:be:5a:81:
79:8f:00:bc:2b:20:7b:69:4b:e8:f5:bb:51:ed:18:b0:ac:3f:
8f:44:1c:25:dd:f4:62:c4:89:e5:88:ba:5d:df:e3:17:0f:6c:
da:9a:ce:09:1d:61:8e:28:a0:87:cf:70:c5:6c:9a:02:d3:1a:
29:a4:40:c1:b7:e9:24:29:e0:c4:aa:3f:c9:51:34:2b:29:f8:
8b:8c:d2:b6:60:9d:6d:cd:5d:92:0c:89:61:9c:35:78:24:1e:
e9:27:4a:0f:8c:9d:8f:b4:15:6e:d4:4e:31:ac:07:1c:51:8e:
b9:dd:de:93:d4:45:a5:df:80:9c:5a:53:4d:ec:76:35:e1:0e:
ce:86:b0:e9:1d:2e:c6:29:c6:44:9f:2f:a3:68:67:4d:18:a4:
27:e4:6d:33:68:3e:ea:8f:c8:06:f9:e7:35:97:40:6c:ae:24:
4a:5b:21:10:fb:4f:38:90:b4:07:62:46:8e:88:e9:df:f8:3d:
c7:8b:36:f9:93:22:f6:5e:91:6c:bb:2a:b6:ac:83:83:74:c6:
3b:8f:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:44 2025 by rpki-client