Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: 5RsCEeYyEyuWJUN1q7sDADa9h852VSnU2lhVhpCYHjk=
Subject key identifier: 64:4C:AB:63:DA:7B:19:E3:24:49:5E:5C:F7:8E:98:98:C6:19:94:20
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 01984C2F8C0717EA15194CEB987B77B2E02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 14:00:40 +0000
Manifest this update: Sun 27 Jul 2025 14:00:40 +0000
Manifest next update: Mon 28 Jul 2025 14:00:40 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: 22/968ruM3g9ttMl8/Y1mnS/pFmFhKYJ/VX25JuGzj0=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:8c:07:17:ea:15:19:4c:eb:98:7b:77:b2:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Jul 27 14:00:40 2025 GMT
Not After : Jul 28 14:00:40 2025 GMT
Subject: CN=644cab63da7b19e324495e5cf78e9898c6199420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:39:78:83:9e:a4:b7:d9:ed:ca:d0:79:fa:
82:7b:43:05:92:f1:ac:4c:60:f4:62:d9:96:e0:48:
3a:cf:7a:c4:04:0f:21:cc:ea:09:03:e5:17:db:af:
8c:7a:7d:b2:34:d9:33:b5:7c:87:4d:a0:3f:fc:b8:
cc:d4:a9:1f:fd:f1:c2:7e:fc:52:47:a7:29:14:70:
c9:0f:46:91:9e:03:27:a6:9f:7e:93:04:38:a1:2c:
f7:28:1c:9e:ed:dc:c9:62:77:4b:a1:9a:5e:99:79:
ff:a8:14:79:1a:1d:c6:9f:66:14:9d:e2:c6:8c:0d:
0a:4d:42:36:dd:96:14:9c:66:27:40:7e:56:5f:d7:
87:a7:f8:48:ad:5b:af:16:f7:94:e7:f1:6a:cb:1c:
13:08:ab:2b:ac:3f:e2:4b:da:73:4a:02:11:2b:12:
de:ad:a1:3d:f8:6c:0f:95:54:64:e0:17:35:c5:58:
76:7a:9a:b9:85:dd:6f:bd:14:ce:7a:92:67:2b:d9:
be:05:66:e5:ed:0e:0f:ee:b0:ce:ee:e7:6b:cb:6d:
5c:c7:97:41:62:9a:a5:b9:eb:7e:6c:6d:ba:e4:5e:
13:51:02:65:39:d4:5e:0b:e6:36:b0:75:37:c4:59:
01:3f:1d:62:99:9a:40:c3:0f:46:14:2b:3a:2c:2d:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:AB:63:DA:7B:19:E3:24:49:5E:5C:F7:8E:98:98:C6:19:94:20
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:51:c2:92:a2:dc:ac:3b:d8:8a:14:82:a6:f1:da:46:de:
0a:97:f5:95:66:e5:eb:83:42:1a:9c:1c:8b:c2:1f:38:16:01:
86:cc:53:31:9b:23:1e:b8:04:96:0b:27:15:3e:75:fe:ad:db:
69:24:ee:38:34:89:96:63:cc:65:5d:1c:d1:af:1b:3c:20:c7:
3b:01:55:01:e4:f7:9e:59:91:8c:2e:7a:25:94:e2:1b:97:8a:
95:3a:5b:0a:e7:a5:63:1f:79:2f:c7:ad:87:52:f0:17:ff:2b:
39:ae:30:63:75:14:38:25:e9:3f:bc:d2:d7:73:3d:36:3f:48:
c5:b3:6e:45:b7:21:50:31:70:bd:bc:e5:96:86:fd:e4:b1:af:
60:33:82:fc:4a:2f:a8:f7:64:e3:01:94:6e:36:2c:f1:b0:90:
66:80:a1:63:60:d3:83:01:45:ab:bd:c8:6a:3f:50:fa:e5:09:
ba:72:ce:b0:b6:ee:36:f7:e3:42:2c:2d:8c:63:0a:92:1b:57:
7b:a7:0f:f9:48:c0:4c:d7:2e:e4:13:71:a1:1a:50:30:21:8c:
81:88:51:42:dc:72:d6:69:6c:04:9f:71:0c:c3:0c:85:3f:e7:
dc:c0:9e:15:03:3f:97:58:c3:12:b4:0c:a8:2e:80:3a:0b:07:
4b:56:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:29:40 2025 by rpki-client