Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: f8nSDNfHm+vEqpSAT2fr4ZGoyAuaf8GGNSQjfSg9iU4=
Subject key identifier: B4:1D:5A:F5:B8:69:A7:A3:D9:7A:9B:9C:B5:6E:C3:C6:D8:2B:43:39
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 01984AE6052D552D2B889B0BE047C12FC493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0D2A
Signing time: Sun 27 Jul 2025 08:00:45 +0000
Manifest this update: Sun 27 Jul 2025 08:00:45 +0000
Manifest next update: Mon 28 Jul 2025 08:00:45 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: xmZVqx0fBzoIkwH46U+MhvgmMyrJOycF04WmdHNSbP8=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:05:2d:55:2d:2b:88:9b:0b:e0:47:c1:2f:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jul 27 08:00:45 2025 GMT
Not After : Jul 28 08:00:45 2025 GMT
Subject: CN=b41d5af5b869a7a3d97a9b9cb56ec3c6d82b4339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:fb:fa:c7:23:5a:cd:08:2b:2c:94:62:14:
db:3e:95:46:e4:b2:1c:8a:49:e2:09:b0:73:4f:21:
31:0f:44:2a:3c:35:ac:cf:04:2f:1f:0b:9c:01:5d:
57:ba:39:83:82:79:25:9f:2f:06:71:a0:a6:95:77:
00:d9:14:73:3c:83:1b:ad:94:68:2f:7d:3d:88:56:
87:55:cb:38:97:48:fa:81:9b:28:3e:1e:7c:6e:16:
b9:7b:16:62:7a:ad:79:cc:cc:28:15:18:84:07:0a:
65:6b:bb:88:32:56:ae:fb:70:ff:1b:dd:ce:4d:86:
e8:69:a1:29:4b:ed:21:7b:79:85:ad:db:1b:3d:76:
ad:61:e8:55:5c:e0:eb:9c:41:6c:20:7c:0c:a4:01:
ae:21:49:58:40:cf:fe:e7:f9:16:17:a5:2c:09:c4:
4e:3c:1b:68:6c:0f:20:11:e9:4d:81:8b:00:e0:5c:
f6:34:66:d6:55:ae:52:a5:d1:35:b2:88:14:e0:72:
06:7c:35:9d:d5:e6:a2:ae:df:85:3b:5c:c1:12:bf:
f7:97:f6:b6:4b:3b:0c:e9:7d:e6:b3:bf:95:06:c3:
0c:f5:09:0a:39:54:34:44:b0:52:52:96:51:e9:e3:
f8:a5:91:0a:c8:97:7c:00:13:dc:a9:f8:14:d4:8b:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:5A:F5:B8:69:A7:A3:D9:7A:9B:9C:B5:6E:C3:C6:D8:2B:43:39
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9d:2b:e3:fb:5b:7c:c3:f4:66:53:41:29:8a:84:82:b0:bc:
b5:4a:35:bb:d5:40:5f:05:8e:11:fd:a4:76:78:19:b1:40:7e:
2c:64:2f:e9:09:1e:cb:00:62:4c:8c:b0:c4:fa:e6:49:81:61:
43:2e:1a:f0:48:36:99:b5:73:10:a2:f6:f9:cd:ad:35:da:42:
5b:02:d1:94:81:cf:66:e0:27:cb:cc:c0:48:e9:b1:46:b3:0d:
e0:12:a4:a8:ff:03:c9:f7:17:f3:66:69:22:b9:94:16:c2:e8:
6f:1b:1c:a3:4c:16:f4:18:cf:5a:f4:76:ff:02:92:04:15:c0:
ad:aa:a2:37:a6:cd:b8:39:87:f8:34:a5:60:63:f6:c6:b3:af:
4a:1b:c5:ee:d7:15:46:24:65:41:8d:09:5e:63:2d:35:6c:c8:
63:46:c3:b1:34:59:16:f7:f6:cc:bf:de:9f:e7:15:a4:21:94:
5d:c0:18:c9:a1:52:1a:b4:47:a5:f9:e8:39:aa:c0:5f:8b:c0:
42:65:3f:9a:e9:2f:3f:69:ad:b9:b1:13:62:c5:ea:1b:2f:19:
a7:da:63:df:fe:e6:1f:30:ea:57:88:ad:32:c5:3e:ab:8d:7b:
cf:f8:b4:6b:69:c8:51:d5:e0:aa:e8:b5:cb:04:5a:5a:33:ab:
fb:a0:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:20 2025 by rpki-client