Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: +7GfNu9d7yvqyo84TC9uM6SRm23e0Bs6GSR6ix4AxSs=
Subject key identifier: 4E:59:FC:AD:F2:35:59:C2:1A:41:5C:8D:FD:4C:28:B8:87:A8:0B:C7
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01983A291AE7E1BA25230FD6B05C524D1EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0A5D
Signing time: Thu 24 Jul 2025 02:00:29 +0000
Manifest this update: Thu 24 Jul 2025 02:00:29 +0000
Manifest next update: Fri 25 Jul 2025 02:00:29 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: fqP9nTOr5rhFlRSMm8VzRKMZkFtuQZdoWIbIWKI9hqA=)
5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:29:1a:e7:e1:ba:25:23:0f:d6:b0:5c:52:4d:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 24 02:00:29 2025 GMT
Not After : Jul 25 02:00:29 2025 GMT
Subject: CN=4e59fcadf23559c21a415c8dfd4c28b887a80bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:e7:6c:ca:1e:7e:1a:aa:0c:5f:1d:09:f3:
7e:16:f5:9a:e5:1c:5d:96:80:1d:42:34:66:17:79:
d4:a3:a5:94:b8:74:44:55:58:ba:5c:ae:70:e5:e0:
2f:9b:61:9c:7c:40:fc:1d:89:43:da:94:ad:a1:0e:
f0:ca:a2:3b:dc:63:df:b5:39:3a:f9:84:6d:f6:85:
ad:8e:28:2a:ca:93:72:f4:38:06:6f:12:54:ec:86:
d6:0a:5c:52:5f:d4:73:f0:2a:0a:aa:99:fd:23:85:
11:8d:e9:de:23:c0:9e:88:5a:48:1b:54:78:02:c2:
7f:2b:a1:64:a4:c5:32:d5:93:e7:34:95:76:ac:d1:
38:0e:3b:cb:3e:d6:02:6f:29:f7:17:88:ef:3f:18:
2a:a4:86:82:f3:ff:14:b5:09:56:02:f2:81:88:3a:
72:44:c2:e0:29:27:98:15:ff:03:f5:bb:04:71:66:
2b:97:9f:70:08:d9:35:c1:35:66:ac:ab:02:9c:29:
9a:4a:30:94:f1:c8:4d:58:71:45:52:c6:28:c3:dd:
5b:9e:76:26:a9:66:62:4b:9b:de:b1:5c:3c:d8:22:
6b:6e:98:9b:c0:db:eb:6c:04:48:d2:2e:04:56:23:
55:c0:90:c4:7a:5f:1b:49:88:5c:ba:36:93:35:5e:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:FC:AD:F2:35:59:C2:1A:41:5C:8D:FD:4C:28:B8:87:A8:0B:C7
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:59:d3:96:1c:c9:af:25:0a:74:36:ac:3a:9f:73:9d:e4:
53:32:ae:c1:e8:b9:e8:a9:20:e9:26:5e:8d:9a:b5:89:cb:2d:
1e:3e:74:a9:c3:b8:ca:a0:b7:fd:dd:f0:41:15:a6:bc:f0:be:
e8:39:c9:e1:bf:d0:91:1f:84:97:c5:5c:47:3d:a5:45:e2:5a:
9e:21:85:58:0e:b5:9c:47:c1:4e:27:9b:bc:98:43:cd:10:97:
49:9d:f5:ed:91:80:e1:99:c9:43:9a:16:07:4e:7c:b5:d2:6b:
ec:8f:c4:3c:0e:3b:f9:30:96:11:1b:a3:92:45:87:ca:0e:73:
b7:c6:16:8c:ba:2d:08:8d:7f:38:16:05:d8:2c:09:16:22:b0:
2f:0b:09:fb:ce:d1:d8:5f:8b:8a:68:7a:98:69:c1:39:ff:c8:
84:1a:6a:0f:7a:cb:e0:c2:5f:b3:3c:f0:b1:f7:25:3e:79:bf:
e4:de:3d:a4:90:9d:fd:c9:0d:62:e5:b1:e7:74:bd:45:51:77:
dc:46:3c:eb:51:ff:97:1e:40:6a:52:c8:e4:e4:78:d5:92:56:
ad:b0:2f:ae:fb:a8:81:54:b4:91:65:60:65:8e:5c:0c:12:d2:
38:7c:be:28:f7:a1:8c:f2:45:8f:62:ba:1c:fb:28:6e:fa:fc:
ed:a8:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:56:41 2025 by rpki-client