Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: HEqyHlD4c25+z+seKS01CHjmeRFtoRUfVlzYsw1WAt4=
Subject key identifier: B3:47:30:96:8D:04:08:AB:08:B5:8D:4A:36:29:99:80:0A:87:27:57
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 019849D39709D59BA15C841346D640B0257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 11EF
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: FhX2+P6Liy59K5OCR7+J+jM2iFt4kkOYCjY6NorfoZE=)
2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:97:09:d5:9b:a1:5c:84:13:46:d6:40:b0:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=b34730968d0408ab08b58d4a362999800a872757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:a9:29:ee:84:8d:b5:b8:cd:34:ac:71:03:
85:73:cd:12:a3:15:6d:23:a3:94:f7:5c:c0:f8:f9:
b3:b2:1c:84:a1:ce:28:c0:b6:8b:23:7a:61:91:8e:
36:e7:17:64:7b:8b:af:c1:5e:72:cd:c1:ed:e8:ec:
e5:bf:8e:fc:67:e8:61:c6:c8:4a:fa:94:ec:1a:f4:
b2:ae:4b:49:cd:bc:e8:3b:6d:fd:41:3a:15:c6:f3:
fd:53:01:e6:b6:31:78:47:54:95:be:96:c3:ba:22:
61:ea:16:02:bb:de:19:af:c6:32:08:74:e0:7a:4a:
b1:c2:72:0d:86:64:7c:0c:5b:a7:36:0b:31:23:c3:
67:0f:4d:a2:88:e5:9a:f2:c5:0a:18:b7:0f:59:ec:
73:1d:80:2a:39:54:de:23:02:a6:61:21:5b:53:06:
09:d9:63:37:41:07:24:d6:92:7a:29:5c:30:ca:c4:
3a:60:ac:5b:a7:bd:4f:af:dc:1e:73:2e:30:8a:99:
b7:d5:35:a0:8e:a6:e4:74:68:8a:c4:be:df:8d:27:
07:a0:72:61:e4:37:5f:3a:cb:94:6f:fd:cd:de:cd:
e1:83:67:56:76:34:01:bd:43:e0:36:c5:8c:9e:a3:
5d:d6:6e:e3:13:3a:c9:23:6a:a0:7a:fc:c5:aa:90:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:47:30:96:8D:04:08:AB:08:B5:8D:4A:36:29:99:80:0A:87:27:57
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:5b:25:c9:d8:00:d4:9c:35:b3:ab:b8:15:3d:ef:8b:be:
6b:a9:5c:5d:ae:e3:fd:80:74:76:5a:a4:6c:75:07:ab:ca:e9:
93:f4:03:34:2b:d4:78:b2:d6:43:30:40:33:6b:70:bd:9d:11:
3f:22:fe:db:7f:b4:28:db:b3:71:54:e2:0e:e4:ee:f0:b4:71:
ec:c5:b8:f9:67:d1:51:b6:89:b8:58:e4:8f:8f:e5:64:03:8d:
88:28:cc:ba:4c:6f:27:f3:49:2e:49:fc:4e:ff:d7:e0:36:6b:
56:43:08:32:2f:24:17:17:20:01:8d:17:fe:54:62:07:be:6a:
69:64:83:a0:7d:7d:1e:ff:c5:c1:7b:20:27:29:a6:83:59:9e:
ee:fd:0f:76:c7:51:56:70:5b:fa:84:ea:ba:4c:41:83:88:83:
24:ba:b0:bd:af:09:6f:7e:5d:ca:52:db:32:e5:26:21:38:bc:
be:c6:15:d6:69:01:d2:6b:1f:6a:c7:2a:c2:a4:f4:93:37:b2:
23:97:b8:82:2d:f7:bb:6b:37:73:1c:26:22:bc:51:e9:e3:c6:
b2:50:c9:45:07:7a:1a:0c:c3:33:28:d3:28:15:00:29:5b:1e:
3e:6a:eb:e9:73:eb:e5:58:98:b0:6b:c7:a1:5c:02:28:06:a5:
12:34:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:05 2025 by rpki-client