Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: OM9AI7XMDpKNn/qp1Z253aoReCzMj0UW0JdL6svMLl8=
Subject key identifier: 89:7F:DD:69:B1:47:E4:FC:62:C8:40:72:E9:59:90:65:D5:42:33:44
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019828C81FD2A716C4C3F743BC7F45454CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 12FA
Signing time: Sun 20 Jul 2025 17:01:00 +0000
Manifest this update: Sun 20 Jul 2025 17:01:00 +0000
Manifest next update: Mon 21 Jul 2025 17:01:00 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: IIL7NeInBHPqktg55Rmff/GH9ELdwssHLP+3SL3KpzY=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:c8:1f:d2:a7:16:c4:c3:f7:43:bc:7f:45:45:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jul 20 17:01:00 2025 GMT
Not After : Jul 21 17:01:00 2025 GMT
Subject: CN=897fdd69b147e4fc62c84072e9599065d5423344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:06:e2:0b:ea:eb:b0:04:cc:a7:9b:8c:8b:
24:5d:ac:a2:d6:44:8c:4a:61:43:aa:14:aa:81:d8:
ad:fd:5e:15:ac:cd:0f:08:46:2d:eb:72:89:62:f8:
3c:4d:7a:f9:f8:89:a6:11:0b:2b:5b:fa:46:12:d7:
85:05:95:44:b1:95:43:fd:3a:9b:73:57:a2:c3:1e:
ed:03:1b:76:cb:23:d4:57:5c:3a:a4:f2:f9:7b:c3:
4b:e9:eb:4b:72:53:22:57:5a:e2:ad:72:c2:56:41:
31:23:bc:87:12:08:32:d6:36:a0:4f:2f:6e:7b:a9:
85:3e:5c:b8:93:6f:65:d5:98:bc:80:e9:d5:e2:19:
05:b5:48:fd:e3:ad:e4:4f:15:91:09:6e:27:90:a9:
48:a6:13:b2:cd:d3:7b:8b:a9:ad:31:28:87:c9:1d:
ec:30:30:54:6d:31:e6:4d:ac:2b:b8:ce:ac:b3:ac:
49:e0:e7:70:99:a6:31:73:16:be:3b:bd:f6:a6:b4:
bf:eb:10:9f:94:2b:94:65:d5:99:57:4b:b0:f5:a7:
0e:c3:4b:a2:5e:72:ca:69:2f:de:e2:77:c6:06:6c:
52:e8:89:de:a4:ba:76:85:5e:70:3f:f0:17:39:bb:
a1:86:13:c8:8a:fe:d3:5b:94:6f:77:12:7c:b3:33:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:DD:69:B1:47:E4:FC:62:C8:40:72:E9:59:90:65:D5:42:33:44
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:5d:0e:80:a0:cb:c7:72:41:7c:1e:e5:f2:19:99:20:1a:
a5:c1:41:8e:83:07:8b:84:55:44:6d:54:4c:02:bd:d5:8c:97:
ae:5f:e9:44:37:47:9d:66:10:0f:ce:3b:3a:9b:1c:86:de:31:
63:2e:25:91:a5:20:cb:71:5d:2d:4d:5f:7d:6d:86:5f:51:a8:
87:18:26:a2:9a:dd:79:c0:eb:4f:8e:21:25:04:21:34:81:43:
83:bc:c6:49:a7:04:b9:c2:ad:6a:dd:e8:c9:b6:4f:70:c7:18:
e9:26:29:d2:41:8b:be:ec:8a:81:18:47:5f:4c:30:4f:de:bf:
99:ea:c3:df:56:b2:fb:60:96:15:46:e7:54:87:d9:d2:10:c4:
d9:fc:4b:a5:64:f2:7f:db:57:fd:76:b4:54:0d:c2:c3:16:dd:
98:3c:3c:86:b4:10:4f:2d:45:e4:b4:e2:9f:d8:da:8d:66:4c:
27:96:8a:d6:08:ff:8b:78:e9:9c:6f:26:a8:38:f2:ba:37:6b:
77:d5:9f:66:13:b1:e4:74:b5:92:33:4e:21:b4:d7:e5:96:cb:
98:e0:54:c6:03:a2:22:27:26:43:0d:6b:75:4d:01:aa:41:08:
88:70:22:d8:0c:dc:fd:a2:0b:25:eb:f4:f0:e1:66:44:94:7c:
f6:cb:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:48:39 2025 by rpki-client