Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: evUGcfJDMhKOxpkl9CQC6sfFBCQgIIJJr/R0ITmnXiU=
Subject key identifier: 28:D8:CD:9C:D5:81:36:4F:C7:FF:FA:09:9C:01:00:F4:91:59:61:1B
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01983E05D4956054BF2FEA03964EF56E3F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0A5F
Signing time: Thu 24 Jul 2025 20:00:26 +0000
Manifest this update: Thu 24 Jul 2025 20:00:26 +0000
Manifest next update: Fri 25 Jul 2025 20:00:26 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: qINTEntLbRRIP/ZAfMAm5csC7P8g8CGuw/lutWGjuNI=)
5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:d4:95:60:54:bf:2f:ea:03:96:4e:f5:6e:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 24 20:00:26 2025 GMT
Not After : Jul 25 20:00:26 2025 GMT
Subject: CN=28d8cd9cd581364fc7fffa099c0100f49159611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:a8:4f:82:6a:ec:bb:53:af:57:54:a6:45:
88:52:c2:35:64:2d:64:e0:b0:9d:a2:68:45:0b:4b:
31:ae:64:4e:c0:d1:4b:d4:88:76:81:5d:ad:8f:b9:
26:c9:bc:14:dd:d4:42:dc:74:b6:8d:12:25:ef:61:
df:dd:e3:32:97:2b:dc:46:0d:8d:c2:8e:4b:b2:79:
25:cb:66:91:a0:c6:60:b5:c8:81:7f:bc:ce:17:4b:
88:cc:31:a4:42:2a:56:30:51:3d:6d:d8:35:ac:ac:
f1:ef:50:9a:fb:de:34:dd:6e:75:68:b0:7e:47:0c:
07:99:2e:81:79:48:be:0b:c1:78:67:7b:fd:72:9e:
ad:a5:c2:31:a9:68:d6:ab:a7:f8:fe:4d:8c:52:a0:
6a:57:61:fd:9a:54:07:ca:49:98:50:eb:73:cb:dd:
fe:6c:87:d3:d7:09:8e:81:66:f4:a7:7a:af:d2:e8:
ff:75:bf:75:45:c1:c6:45:e0:7f:86:24:1e:cf:e1:
38:77:ca:f6:ba:ca:c2:ce:1c:aa:3a:eb:71:63:06:
66:82:78:c5:92:ee:c6:dd:4e:9a:88:69:bb:b2:f3:
ba:ef:45:50:4c:7d:2d:e0:c8:59:18:44:1c:e3:d9:
c5:b2:0e:94:90:8b:76:6c:28:61:f2:0d:42:cc:09:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:CD:9C:D5:81:36:4F:C7:FF:FA:09:9C:01:00:F4:91:59:61:1B
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:89:62:8b:7d:0f:26:9f:ef:64:5d:b6:67:10:a7:7a:1c:e9:
6f:9d:2e:58:53:de:87:76:75:38:7d:6b:1f:67:d5:6f:c5:32:
08:ae:21:5a:da:4b:b9:9a:74:e3:42:1c:1b:c9:3b:a6:5f:7d:
f5:35:45:4d:60:e6:b6:a1:45:cb:0a:ab:9b:6e:88:e9:78:65:
a2:fc:c3:db:cc:b4:c4:ff:9b:17:b9:f9:25:5f:4d:0f:f1:b4:
05:f8:d5:fa:c7:9f:da:bf:8f:27:b8:2c:d8:ff:be:11:d7:49:
f0:19:03:66:94:94:4f:36:7c:29:4f:68:61:11:c4:ba:17:cf:
e9:f4:f7:81:3f:b6:09:f0:36:b3:aa:ee:5c:dc:66:1c:ed:85:
03:bd:44:8c:8d:41:1a:7a:ec:b4:09:51:15:f6:ed:60:b0:8f:
b6:f6:fa:78:4a:84:2f:04:c2:ac:3c:4a:db:d5:5a:de:1c:08:
7c:96:3c:8d:b1:46:79:fd:32:bf:d1:ea:36:00:20:87:90:b6:
e2:a0:9f:32:b2:f2:3c:82:a9:a0:6c:6f:d1:da:09:0a:38:55:
a4:6b:90:ba:73:93:f1:19:83:39:25:b9:d7:ec:e8:ca:e3:2c:
44:93:41:0c:1b:4f:43:c8:99:3e:0a:a4:e7:65:c3:5e:33:c6:
3c:2f:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:43:30 2025 by rpki-client