Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: FGuANh3Ai2M2kDOfIgJJj1CejS/hsZ/R1hxtuLozkLA=
Subject key identifier: F3:01:0F:AC:6B:BB:15:50:D7:99:4E:39:D5:D6:61:5B:DC:05:BC:DB
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019853441434209A27431002233ED65D6451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0C0B
Signing time: Mon 28 Jul 2025 23:00:27 +0000
Manifest this update: Mon 28 Jul 2025 23:00:27 +0000
Manifest next update: Tue 29 Jul 2025 23:00:27 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: fxp16P060flRbx8pTo7zs+UZ1iW0wXoBz1wSPIRcrSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:14:34:20:9a:27:43:10:02:23:3e:d6:5d:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Jul 28 23:00:27 2025 GMT
Not After : Jul 29 23:00:27 2025 GMT
Subject: CN=f3010fac6bbb1550d7994e39d5d6615bdc05bcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:bb:36:40:8b:a5:e7:86:bd:22:24:a2:a9:
c1:7c:b8:8f:f1:2c:3f:dd:a5:bd:68:fb:0e:c2:63:
61:ce:bc:f5:d9:c6:3d:a8:14:e0:3b:ea:3b:b4:2c:
98:24:8c:05:18:c5:74:ea:67:6a:f4:ab:50:92:f6:
66:eb:e9:5b:6b:bd:fb:8d:06:39:1b:39:26:92:89:
0d:0b:bd:d4:c2:d0:49:e3:f9:e7:8d:1e:f0:55:d9:
7d:48:f3:46:50:3f:2d:f5:1e:83:d9:ee:de:95:59:
c2:1d:10:89:c1:95:ce:c0:b3:67:b2:b2:d3:b4:d4:
9f:05:52:48:e3:12:f4:fb:02:8f:d0:ec:1b:94:ab:
4b:02:22:b7:0c:d8:02:2e:f3:d0:b2:89:01:2f:9d:
d3:e8:44:01:eb:8a:15:35:8e:14:7c:5c:7a:74:23:
3f:2d:70:2d:6c:08:30:3b:d0:51:f9:03:d8:93:16:
cc:d6:e0:59:e3:f3:b6:df:80:eb:35:bb:d5:4a:87:
ee:f0:59:64:8c:c5:c0:98:fb:e6:61:18:e0:32:18:
1c:d7:32:84:80:07:f2:be:62:bf:93:4e:de:e3:7c:
87:4a:2e:9e:77:53:16:50:74:69:33:f9:bf:03:0a:
39:ae:13:ed:1c:d1:d9:33:d4:5a:eb:09:61:d7:75:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:0F:AC:6B:BB:15:50:D7:99:4E:39:D5:D6:61:5B:DC:05:BC:DB
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:9d:db:c8:47:61:c3:93:40:c3:e4:44:90:d6:00:a4:58:
5f:95:e5:5a:55:cd:bd:13:3e:d7:34:80:ad:fa:d1:34:04:65:
bd:42:f9:3e:0f:7b:38:03:17:88:fa:b7:be:bb:c7:55:eb:8a:
f0:06:21:17:98:a6:17:31:46:01:be:70:69:19:8f:88:95:91:
45:ee:91:ee:92:21:9d:4c:e6:54:46:5b:a7:57:66:d4:6f:0e:
cf:f5:ef:c9:c1:36:74:b7:f4:00:73:fc:59:cd:89:2f:11:f8:
cb:49:70:46:07:f3:e5:c4:e2:f4:a6:93:bf:81:0e:32:bc:c5:
43:d8:30:4f:11:c9:dc:2d:2f:0a:57:f8:fa:8f:7a:4d:09:e0:
b0:36:9a:ed:13:d9:b2:06:6e:24:8e:fc:ef:8d:b1:94:79:db:
82:51:fd:92:7e:7c:d7:f2:6a:21:b4:ce:43:a2:e9:68:b7:31:
73:59:fc:75:60:4a:86:c4:cd:63:5e:d0:3f:47:b7:e5:63:82:
3f:34:dc:41:a7:2f:3d:ef:51:e8:38:2f:ee:3e:c1:b1:32:b3:
51:42:15:e6:0b:9a:aa:bc:b1:ef:45:5b:90:cc:80:f7:db:a1:
6d:24:2b:ea:00:d9:f9:aa:68:c5:2e:b5:ef:26:a6:0f:98:0a:
7e:32:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:51:57 2025 by rpki-client