Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: 71bah9b3LvlzZNtbsF7tNlpethyffS56ijY1qth2/EM=
Subject key identifier: D2:2A:51:1F:5B:11:41:2F:68:CF:27:8D:C8:92:DD:76:62:39:6B:78
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01983081CD4373B81496A00DD1B3A1577059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0A58
Signing time: Tue 22 Jul 2025 05:01:09 +0000
Manifest this update: Tue 22 Jul 2025 05:01:09 +0000
Manifest next update: Wed 23 Jul 2025 05:01:09 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: yZBVqUlX9bSVk0olx/tUVpS8HEr3dBfsQp/Fd0CvFGM=)
5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:81:cd:43:73:b8:14:96:a0:0d:d1:b3:a1:57:70:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 22 05:01:09 2025 GMT
Not After : Jul 23 05:01:09 2025 GMT
Subject: CN=d22a511f5b11412f68cf278dc892dd7662396b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:10:af:3b:74:62:5a:aa:f3:a4:f4:7a:7f:
87:d8:e8:74:f5:95:7b:b2:73:1b:48:ba:e8:e1:b0:
70:13:e6:89:4c:88:35:70:69:77:1f:6b:4f:a1:be:
2d:e3:a4:80:7f:57:1c:91:08:09:dd:9d:f3:06:f6:
00:b4:c8:4a:ca:3f:3d:62:87:60:41:3c:92:b5:e6:
f4:51:c4:97:c3:11:b7:8c:10:06:f6:66:e1:3f:98:
37:5d:a2:9a:fb:21:e7:fd:7c:b7:95:f7:ab:6e:3c:
53:3c:0d:10:52:f2:8f:b3:eb:eb:4c:c2:f4:9c:02:
82:9d:84:3e:bf:42:4a:ba:58:85:79:2a:05:55:ab:
af:1e:bf:03:ab:2a:07:af:80:1b:20:d9:46:8f:a7:
77:e3:30:27:06:3c:d5:b0:c8:3a:24:a1:c8:f5:8f:
87:b4:ec:2b:82:75:f0:69:59:21:8a:5f:78:98:ee:
e2:04:73:8b:c0:46:4c:2c:60:ec:54:01:92:ad:a0:
6f:07:00:de:09:55:f4:d1:de:50:c5:37:90:34:7d:
67:98:00:c7:0f:62:7c:4d:c3:cf:68:1a:7c:0d:52:
8d:f1:f9:dc:02:8d:28:d8:3f:f8:51:39:38:a3:38:
12:60:96:d4:bb:cf:3a:03:8b:63:b2:98:d9:20:30:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:51:1F:5B:11:41:2F:68:CF:27:8D:C8:92:DD:76:62:39:6B:78
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:11:b1:09:12:15:16:f3:3c:75:77:dc:3b:24:1a:e5:ce:
6a:f8:6f:a1:dc:f2:21:7f:7c:c8:95:6f:59:f7:8f:22:1b:42:
16:4c:54:c0:d2:75:a8:f4:d7:08:7a:a0:d8:9c:49:67:07:d8:
37:5c:da:85:23:8f:d3:7d:be:12:d5:43:5d:71:a9:51:ad:12:
50:2a:5a:3e:cd:0e:d5:75:27:aa:0c:e6:2b:da:2e:36:87:6d:
27:03:e0:83:8c:49:19:b3:21:38:ff:91:72:91:7e:c3:4c:a2:
f4:26:59:a6:8b:f5:43:4e:2f:df:5a:97:2e:2c:19:de:33:7f:
0c:3e:86:cb:a7:50:93:a7:96:95:96:ec:a5:96:a7:af:ee:59:
f4:d3:bb:7a:8c:7c:fe:7b:51:88:6a:dd:4c:1d:27:6f:9f:d2:
68:e4:36:ae:b7:e4:e6:87:d3:37:03:c6:36:a1:78:1f:73:86:
d5:6f:8a:d2:a9:65:ff:c5:d0:cc:95:14:97:e3:d5:69:6f:19:
b5:c3:66:1c:5d:e0:bb:8b:0b:54:51:69:cd:ed:1e:cd:d4:f7:
59:83:05:41:af:d9:ba:d6:24:ac:2a:55:78:3d:2a:bc:80:e5:
7d:a0:f1:98:02:52:ff:28:a2:ed:bc:68:34:56:ff:2c:b2:3f:
d9:61:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:39 2025 by rpki-client