Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: qpwpgKWWCMPK/RRM5YcBseuJYTXcr3/QeBTOOkE3x/o=
Subject key identifier: AC:F9:92:C7:7A:93:B3:C2:66:E3:74:F2:24:B9:DC:AF:18:93:4C:A3
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 01985DFF569A98A16E067080D211EE2B4DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 0F89
Signing time: Thu 31 Jul 2025 01:01:11 +0000
Manifest this update: Thu 31 Jul 2025 01:01:11 +0000
Manifest next update: Fri 01 Aug 2025 01:01:11 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: sB22LVzRibmht4VzQ2QHFb2eDKQQ7J0vsfVdbCndJU4=)
2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:ff:56:9a:98:a1:6e:06:70:80:d2:11:ee:2b:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Jul 31 01:01:11 2025 GMT
Not After : Aug 1 01:01:11 2025 GMT
Subject: CN=acf992c77a93b3c266e374f224b9dcaf18934ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:b4:8d:70:7e:b3:88:fd:16:5d:84:f9:9d:
a9:d8:6a:ac:c6:a9:46:41:41:2a:07:5d:8b:46:02:
73:a3:de:35:90:94:99:f7:c6:e1:23:6c:ec:c3:da:
6b:a7:3b:f4:5e:9a:74:cb:8b:0e:eb:bb:1d:9f:60:
10:85:23:62:f8:f6:d0:9d:a5:aa:b0:b9:7d:97:26:
9f:59:f8:ae:e8:01:5a:87:4b:2a:c3:94:80:e7:a7:
6a:db:2d:39:b8:b0:a5:7d:fa:5a:6f:e0:90:59:d5:
28:81:d1:e2:0a:c9:be:c9:05:b7:99:8e:5e:b1:ce:
73:f4:c2:d8:a4:90:c1:e3:be:12:90:c5:94:78:09:
02:71:e8:e2:56:58:21:a9:02:e1:64:a4:bd:3b:04:
81:17:ef:80:33:36:7c:62:4b:4e:8e:4f:0c:9f:92:
f1:8f:33:43:9b:04:fd:e5:1f:b6:1e:ea:83:a2:70:
5e:67:c1:fa:da:e2:53:76:b3:e1:98:54:ba:df:16:
0e:06:21:f7:cc:24:3b:d8:5f:f6:92:f7:6e:1e:4a:
4d:b4:ba:bb:39:24:63:7b:09:73:27:66:57:53:a6:
25:75:81:c2:bd:4a:6e:e6:2d:ea:98:c4:98:95:01:
2e:1c:25:4b:a1:ff:ff:1c:25:ab:0c:e2:9b:25:2a:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:92:C7:7A:93:B3:C2:66:E3:74:F2:24:B9:DC:AF:18:93:4C:A3
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:20:36:b8:d7:d8:b2:e5:8f:72:6c:f2:f1:a0:00:d7:25:93:
70:bb:1e:67:b8:81:29:72:96:4e:ed:5b:e2:5c:af:cd:5c:fc:
15:fa:a3:59:d6:36:4a:78:43:a4:40:f5:5f:16:5b:b1:1b:8a:
d0:7e:4d:9f:3b:86:89:84:67:15:6d:6a:d3:23:40:97:95:76:
71:d2:d9:b8:51:a6:33:ff:a5:ab:0a:d7:3f:d2:3c:66:8d:94:
45:8c:d1:5f:af:bf:d3:c5:39:48:a9:8f:43:87:5e:b6:c8:30:
4f:31:c7:73:03:13:8a:bf:57:5e:87:03:09:31:4d:9d:18:82:
ee:3f:fe:cd:29:0b:42:e5:e7:4f:88:e5:e8:f3:de:74:e0:c6:
02:cd:8c:f3:56:86:a0:35:13:1a:a9:c2:b8:51:c3:f9:10:1f:
d9:c9:07:0a:0b:c6:85:09:4d:84:67:88:33:95:4d:2a:77:19:
3d:6e:ed:a2:87:eb:ed:27:57:1e:ab:c7:46:3b:4c:ec:3b:5e:
82:f2:a3:b7:3b:cc:bf:6a:a9:ad:9f:f7:c2:41:d4:ae:ec:2e:
b7:1b:68:40:55:0b:ff:4f:25:14:87:69:55:17:11:91:22:a4:
aa:24:ce:48:fa:74:58:75:d1:bd:62:0e:5a:3f:c7:c7:de:a5:
5d:00:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:19:23 2025 by rpki-client