Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: txTjZ5HHM9GCb2aEi14SRtstKg7eJJZQ1FaIdO0leg8=
Subject key identifier: AD:87:A9:59:5D:81:CA:21:D7:45:18:FF:AE:7C:E6:BE:D6:82:36:0A
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019848F75517304B8309D0A966B99BE244D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0DC9
Signing time: Sat 26 Jul 2025 23:00:25 +0000
Manifest this update: Sat 26 Jul 2025 23:00:25 +0000
Manifest next update: Sun 27 Jul 2025 23:00:25 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: x0rvvdzltcdeZqmVEfACJrfl3f9XX9/DG1T4OM3YPTY=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:55:17:30:4b:83:09:d0:a9:66:b9:9b:e2:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jul 26 23:00:25 2025 GMT
Not After : Jul 27 23:00:25 2025 GMT
Subject: CN=ad87a9595d81ca21d74518ffae7ce6bed682360a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:87:84:12:7b:4b:de:11:62:99:98:3d:57:
9d:cf:d0:cb:36:d0:c0:12:8b:46:78:3a:e2:2a:4e:
9f:20:57:26:11:48:4c:4e:1a:34:30:77:07:a0:64:
1a:7a:2c:12:79:cd:0c:cc:ea:02:39:9b:b7:1a:00:
6c:ce:20:fc:e3:1a:5c:6c:a6:64:ce:ea:c7:68:10:
00:0c:12:a6:d0:1d:59:66:e4:9a:60:2d:d0:44:d8:
b3:81:86:ac:6d:9a:fa:c5:a5:86:3c:ee:04:a8:1e:
c4:15:17:9d:bc:61:7f:3d:3f:c2:b8:f9:4f:91:05:
f0:39:c0:8d:61:e4:b5:65:81:97:7d:a6:56:8a:3b:
a8:1d:57:93:f9:93:1e:61:14:c5:66:18:91:0c:68:
d3:19:88:91:be:22:12:46:2b:22:f0:3c:c2:d0:6e:
ae:eb:63:c7:70:6a:54:26:98:8a:70:de:c9:b8:6a:
8b:ec:7b:6e:f2:51:17:99:e9:28:1a:be:0b:7a:48:
91:50:43:b1:dc:c2:ba:ac:48:39:b4:08:26:cf:73:
98:e2:3d:61:ad:c3:3d:c2:ae:08:37:65:3b:4e:24:
a2:01:38:7f:57:6e:a6:8d:ce:62:0e:02:c3:8f:9f:
f8:d2:e2:bd:39:06:48:5a:a1:f7:66:ca:6e:35:09:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:A9:59:5D:81:CA:21:D7:45:18:FF:AE:7C:E6:BE:D6:82:36:0A
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:c3:a4:fe:a7:3a:9d:b1:db:98:f1:0a:d1:50:9a:c1:7a:
01:60:89:8a:e1:5d:9e:1f:3c:36:dd:ee:c1:ad:ba:8f:93:11:
c1:6e:65:c9:98:82:1e:b6:48:57:63:21:65:e0:00:72:d7:d3:
25:11:c9:b4:ad:20:f0:1d:86:53:fc:9d:9f:0b:eb:02:41:5a:
c5:e5:1a:59:2f:8e:1b:c6:d2:f7:44:e6:7c:19:5a:1b:1b:34:
ef:70:09:57:6a:a2:79:32:46:78:88:dc:a4:ac:a4:60:ca:dd:
c3:45:cf:80:c6:56:f9:61:56:f4:db:df:14:ee:ed:07:bc:a8:
f1:e2:be:bd:1a:eb:4d:be:fb:85:aa:13:73:10:18:f8:1b:35:
20:e9:1a:0d:53:76:07:6c:60:91:c5:2b:de:5c:65:84:ec:c3:
dc:81:f4:d3:f9:96:74:bb:0e:1e:59:0d:54:3c:da:30:00:40:
87:18:5e:03:3b:22:68:97:a1:ae:89:b9:1c:b2:55:d0:1f:4d:
0f:b9:99:36:cd:25:77:6f:da:34:f8:bb:31:72:57:90:94:4f:
0e:ce:7f:ca:37:7b:7c:aa:33:73:5c:c8:23:83:b3:b8:25:5e:
ea:e6:c8:b5:0b:61:2d:8d:3e:10:9d:00:44:cd:4e:7b:86:12:
1b:6e:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:18 2025 by rpki-client