Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: j7rEp6Kz8ZpMwIBUnk+VFv0KvKBKC9i3vKdZPuhFkxg=
Subject key identifier: 61:FE:03:57:2A:BE:7F:45:A2:C5:3A:39:FE:05:7E:32:13:74:FC:43
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 01984965E865DFD27EC42A05196630890CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0D8C
Signing time: Sun 27 Jul 2025 01:01:12 +0000
Manifest this update: Sun 27 Jul 2025 01:01:12 +0000
Manifest next update: Mon 28 Jul 2025 01:01:12 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: xatH9q2rg+397JV9NGcs8JgE6floGK2s2gdayxCN7OU=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e8:65:df:d2:7e:c4:2a:05:19:66:30:89:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jul 27 01:01:12 2025 GMT
Not After : Jul 28 01:01:12 2025 GMT
Subject: CN=61fe03572abe7f45a2c53a39fe057e321374fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:51:0b:f1:94:21:d4:cc:fa:47:9d:25:e8:
f7:23:1a:ba:57:ea:0f:ae:e7:0b:87:e9:51:75:88:
9d:c0:86:2a:bf:0f:c8:ef:b0:79:75:33:f4:4e:d6:
e6:3d:4e:3f:68:00:8e:d2:28:31:8c:14:9a:4f:34:
d6:00:01:1f:b4:cd:d5:38:fc:b1:5d:d6:d6:88:b8:
83:be:d0:5b:23:7e:e4:32:85:60:17:64:de:de:13:
09:da:05:ac:d9:43:4b:09:24:f4:ba:74:4e:30:99:
4d:98:13:40:20:8b:02:d9:f2:c6:8a:02:d4:48:87:
9f:06:f5:87:94:d7:a6:31:e5:46:1d:51:fa:ac:15:
7d:6e:2f:19:07:91:bf:56:a6:10:10:f4:6e:8e:34:
22:4d:81:c4:6f:9e:8e:10:ea:5e:35:63:ab:08:57:
fb:07:db:15:20:51:ab:a2:86:f9:0a:66:c5:fa:1d:
26:41:51:89:2d:da:ba:2a:5b:44:8a:3a:c1:e2:a5:
1d:84:2c:05:af:a7:27:93:cb:b3:f9:d1:1f:9d:dc:
3b:1c:c2:da:4e:9e:16:13:87:1a:5e:46:62:36:2c:
27:6f:cd:e7:b5:83:1a:26:83:2d:0b:c8:ec:0d:44:
2a:3e:ad:ba:f9:a0:07:47:86:5b:e2:03:e3:e5:7a:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:03:57:2A:BE:7F:45:A2:C5:3A:39:FE:05:7E:32:13:74:FC:43
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:df:06:89:53:de:31:ba:63:1c:24:17:9a:4c:80:62:1c:
e0:63:95:6f:62:96:26:a2:f7:0d:2d:73:29:65:f7:53:0c:33:
8c:c8:3d:bb:48:9e:89:98:04:1d:bd:53:6d:32:4e:91:3d:07:
f4:35:1f:fd:a6:dc:b3:46:58:17:7c:48:6a:ee:5d:e6:fb:49:
35:36:47:de:cc:90:b5:f2:60:1c:cd:54:45:00:84:eb:ec:e8:
e4:75:e2:57:2e:72:05:57:22:1b:5e:b7:ef:c2:6a:2d:ba:c6:
41:2c:70:ff:12:f2:a3:91:65:06:68:99:80:54:25:b6:b5:04:
91:9f:55:0a:64:b6:14:4c:69:92:38:12:d0:03:9a:94:68:b5:
e3:33:f5:fa:04:df:7f:cf:d8:a6:98:3c:f4:00:19:ad:6b:b3:
cd:f7:15:25:a0:0e:47:22:5c:ff:35:1e:b2:86:00:64:d8:93:
8e:24:d2:b7:22:3b:c1:37:5a:33:2f:06:ba:2e:da:92:ed:8b:
df:11:58:e6:9f:ea:54:1c:8f:f9:30:24:0d:95:d2:f0:3f:58:
0a:9a:98:b3:9f:d4:6e:17:df:73:d2:f3:44:c3:f0:9d:fe:14:
ad:1e:af:a0:fb:ff:9a:2b:6a:36:87:2a:c9:9e:c5:06:d2:88:
ab:87:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:33 2025 by rpki-client