Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: xVaC4vZhE9RcYYP2fs1G2qXZY1aTxq7qePnA2Mh25sA=
Subject key identifier: 43:8B:25:2F:41:28:8B:CD:DF:3D:C3:90:30:54:C0:8A:EC:09:33:FF
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 019848C073527C2B7F58EC1AA8AB46826335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 1040
Signing time: Sat 26 Jul 2025 22:00:28 +0000
Manifest this update: Sat 26 Jul 2025 22:00:28 +0000
Manifest next update: Sun 27 Jul 2025 22:00:28 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: vQGfqhPweK6B0xfvZmaUV3mR6yGzhoJg+R2EB/obTC0=)
2: SgVaw9dGiBaOyFrQoF1dUXR7CDI.roa (hash: OI5adqW3SJrMIQGjIhmdYoxARRioxuyzaVULjGuGLRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:73:52:7c:2b:7f:58:ec:1a:a8:ab:46:82:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jul 26 22:00:28 2025 GMT
Not After : Jul 27 22:00:28 2025 GMT
Subject: CN=438b252f41288bcddf3dc3903054c08aec0933ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:91:b0:39:f4:da:72:2f:90:e1:84:bb:79:
5c:73:bd:21:c1:bd:e1:ef:de:46:1f:56:80:0d:00:
56:d2:aa:38:8e:18:ae:88:e9:38:49:09:26:79:b0:
af:e5:e0:de:25:fa:6b:c8:37:1a:b9:15:11:10:a2:
84:38:92:84:0a:f7:31:cb:b9:d2:15:54:f9:f5:51:
77:45:27:b4:c4:3b:26:0d:50:36:67:7d:7a:70:49:
9b:f8:71:d5:a5:ae:43:f5:59:43:bd:12:e1:8d:df:
80:de:66:99:9f:67:f4:17:e8:8d:7c:f9:8a:2d:af:
ba:90:9f:cf:e6:e6:a6:df:d3:39:00:6b:a9:d4:e6:
e2:73:f1:1e:e1:bd:0f:bd:e9:b9:63:c4:e1:46:5b:
9c:43:73:5b:55:9b:83:b4:33:43:3f:6c:77:00:31:
01:15:e5:5a:99:64:6e:86:5e:c4:b1:53:47:1f:b7:
94:71:fd:b1:cc:2a:8f:93:ce:b9:d8:b9:c6:ed:47:
d5:9e:bb:78:0f:ce:85:83:c8:f8:e3:d9:eb:d8:8d:
a3:db:ca:7a:68:e5:d2:72:c6:17:9b:ae:d9:36:45:
17:6a:e4:c3:96:db:a7:45:b9:1c:36:cd:35:05:a0:
7e:f6:94:3c:b0:5d:a1:83:13:e0:36:4e:dc:cd:78:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:25:2F:41:28:8B:CD:DF:3D:C3:90:30:54:C0:8A:EC:09:33:FF
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:71:61:92:41:40:43:5c:96:e8:24:08:93:0d:3b:c5:0e:8b:
ed:d6:b1:f4:a9:0c:3b:12:f4:de:66:8e:b9:66:f8:c0:37:c8:
e6:c7:df:5a:d7:68:82:87:9f:f8:72:41:f8:c4:18:28:a2:20:
32:83:57:ac:7e:d8:23:67:a0:9c:b8:7a:32:8a:78:f6:ba:62:
8a:7e:92:66:8d:be:85:a1:0f:43:39:78:b1:8a:f2:f1:b5:e0:
3b:ad:6a:b8:0e:56:a2:ca:db:23:b9:58:db:7b:9c:8f:32:eb:
0f:3d:1d:51:0f:48:c6:79:b2:3b:96:97:92:71:15:c9:60:f4:
b7:6c:95:92:82:53:0b:18:ac:b3:07:8f:cf:2e:19:d4:76:73:
4a:9c:75:fc:ff:94:05:c3:c3:75:c6:04:2b:8e:ca:62:94:8a:
1e:2d:0b:a9:f0:be:75:9f:8d:de:f9:cc:8b:f7:5e:b9:e7:5b:
5e:96:4e:49:3d:06:29:1c:0f:06:63:52:64:00:fc:8c:9a:5e:
5f:af:43:7a:68:11:37:69:0e:f3:b1:95:02:07:aa:64:d8:a7:
2d:be:ab:af:57:83:9d:80:a5:fe:b9:de:8a:b4:76:8b:18:d2:
bf:ec:b1:a0:fd:47:1c:d7:68:83:c5:c1:23:44:65:fb:3a:9c:
68:42:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:18 2025 by rpki-client