Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: 2HByx4r5uOObMotOwyc5q89VuuQyiaJsKSOuJXLl5hM=
Subject key identifier: FB:D3:53:5A:7C:41:87:E6:3A:47:31:21:5E:82:AA:78:54:63:0D:10
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 019835A80C1146DE645F8267C66E295F3F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 05E9
Signing time: Wed 23 Jul 2025 05:01:02 +0000
Manifest this update: Wed 23 Jul 2025 05:01:02 +0000
Manifest next update: Thu 24 Jul 2025 05:01:02 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: CPqzbQEc35Bx4UIgFyp/qj0Cz+l8cPm3Kh1WCLM4vL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a8:0c:11:46:de:64:5f:82:67:c6:6e:29:5f:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Jul 23 05:01:02 2025 GMT
Not After : Jul 24 05:01:02 2025 GMT
Subject: CN=fbd3535a7c4187e63a4731215e82aa7854630d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:36:ff:0f:56:b7:85:59:66:8c:70:e0:78:
4b:f6:79:6f:5d:9b:f5:45:99:a7:c2:b7:69:99:02:
b8:b1:2f:11:d3:57:5e:85:c1:c1:35:21:8e:00:cf:
b5:3e:f3:27:31:2c:bc:d1:c3:30:4e:ce:17:c9:f6:
9c:17:7a:4b:59:64:7f:0e:ac:f0:47:5a:50:9b:6a:
7c:0a:6d:99:1f:dd:2b:fb:b5:88:a3:21:ee:bf:35:
cc:d0:ec:28:b4:33:1c:83:41:49:12:f9:6c:4c:af:
33:a0:c8:e3:fa:b4:62:2d:04:c1:0c:18:5f:c0:62:
df:36:33:53:04:9a:68:10:c9:eb:42:bc:2d:55:dc:
63:c0:f3:c1:65:f6:70:5e:80:01:6e:30:c3:d5:cc:
3e:c7:18:70:6f:a9:4c:71:28:de:7a:5f:2f:5e:65:
3b:20:d4:96:43:fa:30:bb:48:c3:6c:66:a4:af:7a:
a2:78:c8:29:f2:62:65:2a:9d:94:ea:7c:1e:28:a2:
91:45:81:2b:54:3b:46:83:a3:9f:a5:3e:05:fb:3c:
d4:e0:0a:03:0c:9b:ae:53:c4:06:0e:ea:e1:8e:29:
12:c8:a0:8c:93:b1:66:e7:6b:9b:95:3f:e8:b9:fb:
e0:0e:d7:f2:26:91:c4:60:91:a5:04:24:b6:77:4f:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:53:5A:7C:41:87:E6:3A:47:31:21:5E:82:AA:78:54:63:0D:10
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:c7:0c:7b:b9:53:cf:1e:ed:0f:56:67:d2:11:ee:7a:ee:
3d:f4:cb:af:cc:4a:be:38:b2:f3:4b:03:5e:4a:2c:d3:82:19:
da:c1:4d:4e:ca:e0:eb:54:7a:23:a2:c1:df:18:18:61:52:f9:
9a:53:92:4c:51:57:44:09:2b:43:4a:58:7e:dd:17:07:93:0d:
46:65:1f:f7:7d:4c:71:64:7d:4e:f8:2b:0c:50:52:0f:e1:46:
56:7f:b9:58:ff:9d:96:30:01:bb:86:87:c2:4e:b3:fb:cb:a8:
9d:04:cf:50:78:b7:ba:32:b5:6d:b2:0a:0e:09:a9:bd:5e:7a:
fe:c3:bc:77:50:b7:0e:b6:b0:b1:75:07:57:86:46:d9:c7:98:
15:1f:9d:19:1c:19:b7:3b:34:60:2d:e1:ca:90:30:c4:37:cf:
91:0a:8d:28:1c:e0:3d:4a:06:20:41:2c:46:24:ae:58:38:7c:
3b:d4:c7:db:ed:f2:e9:5e:47:d0:aa:78:39:03:69:70:58:8c:
16:6f:4d:1c:98:0f:e3:5a:71:74:e5:62:d7:88:19:8f:75:2e:
ab:4b:06:2f:ea:54:d8:e4:e8:43:e5:70:4a:2b:dd:b1:dd:8f:
de:28:30:cc:e5:42:fb:ca:44:22:e3:c2:96:b0:b4:d6:53:d2:
8b:b6:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:59:43 2025 by rpki-client