Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: YSqmCAQVYSeKIGR1iE1ynbsyr5skWoaCu9v5vJcl1RI=
Subject key identifier: 02:06:7F:84:6A:65:D5:74:4A:B2:94:F0:3F:FA:E9:27:B2:EE:99:7F
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 01984664407030507C7C9CB1C6CD5C9FFF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 094D
Signing time: Sat 26 Jul 2025 11:00:31 +0000
Manifest this update: Sat 26 Jul 2025 11:00:31 +0000
Manifest next update: Sun 27 Jul 2025 11:00:31 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: toXNQrkjVkJV12MBqBM4R3+YzEXYtWtBlsTBfYN2ZOE=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:40:70:30:50:7c:7c:9c:b1:c6:cd:5c:9f:ff:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jul 26 11:00:31 2025 GMT
Not After : Jul 27 11:00:31 2025 GMT
Subject: CN=02067f846a65d5744ab294f03ffae927b2ee997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:44:08:db:a3:14:1c:b8:a3:a6:a9:ef:c0:
71:71:12:f9:95:f3:4e:88:ad:00:a5:ff:ce:94:9b:
fb:fc:19:14:69:5e:0f:24:20:c2:0f:ae:2f:86:ab:
b4:65:e1:58:2f:80:00:69:9f:0c:ed:17:63:b3:11:
ee:f6:9d:26:4e:ad:7a:c1:66:09:bc:c1:69:c5:3e:
b3:52:66:e7:b4:72:25:94:81:29:53:cb:76:2a:e8:
be:ef:03:66:49:b1:93:7f:d4:1b:5e:c8:90:79:52:
e2:33:b4:93:7c:fa:61:53:12:b1:e6:1c:d0:79:f7:
ba:57:a2:ae:7f:e7:1b:5e:a9:ed:37:5e:86:96:83:
bf:72:6b:e6:22:45:51:83:fc:46:d8:26:6f:b4:f1:
90:d1:81:7d:c1:6d:40:29:d2:e0:29:ae:12:61:de:
b5:aa:83:42:7e:80:4f:9b:c0:bc:dc:5b:26:c9:eb:
19:7e:9a:ae:12:4c:70:4f:7b:dd:7f:a4:b9:53:36:
d0:55:2d:a7:13:e2:53:11:0d:04:5c:3f:27:98:79:
44:bc:49:0b:30:3a:ac:31:cc:2b:51:68:0b:a1:e8:
1f:39:2f:50:54:37:72:73:52:b1:99:20:1c:ac:7b:
80:23:c0:df:48:ad:9a:f3:05:fc:eb:e7:be:0d:e5:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:7F:84:6A:65:D5:74:4A:B2:94:F0:3F:FA:E9:27:B2:EE:99:7F
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:5f:0d:39:0c:5c:a1:86:94:a1:48:f5:c9:9b:53:8d:8e:
43:49:f1:66:05:12:e4:0b:ee:e8:5e:bb:26:0f:65:df:c7:74:
9d:1f:4d:d3:b5:d7:29:c9:65:00:40:a8:e4:f4:d5:81:ec:c1:
0d:8a:5f:1c:e1:ba:1d:a8:ec:8d:11:9a:e7:3d:37:7b:6e:24:
31:0b:2b:3a:2a:6a:68:50:4b:a9:a8:7e:30:44:d8:e9:be:56:
e7:6f:dc:65:7c:40:17:38:6c:81:74:81:35:11:81:3e:38:cd:
07:0a:ef:6b:2e:08:f0:e7:d8:15:41:75:72:93:da:e4:b0:44:
e2:f7:ff:f9:fc:3c:2f:f5:d3:9d:40:f4:aa:9a:55:36:24:89:
75:dc:86:6c:f7:12:7e:a4:01:96:e2:63:30:f4:ec:3f:21:08:
aa:5c:de:2c:96:45:f1:c1:fb:07:b3:e1:f5:33:0b:5d:25:f6:
ab:be:44:ea:84:f5:46:5a:69:28:61:95:7b:5e:e7:ac:8e:71:
c5:ae:8f:2c:46:fe:b2:e0:42:f8:a4:a2:8d:25:c0:8f:8d:91:
5a:f1:51:d1:94:6e:a8:bb:bf:67:2e:08:0d:0a:73:cb:7a:f5:
7c:2d:18:4e:40:5c:24:08:89:18:28:d0:a9:ef:91:c5:b5:5d:
1a:a8:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:47:42 2025 by rpki-client