Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: nraM9VlCyUjZghCg+hdeYidfqlTGwepxDtwgUdXUczs=
Subject key identifier: D1:AB:B5:59:7C:5E:E4:E5:2E:0D:74:CA:9C:AF:A5:DD:9D:69:4D:C9
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019849D2EF7599DB968606A8B5E5068E2BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 13DF
Signing time: Sun 27 Jul 2025 03:00:17 +0000
Manifest this update: Sun 27 Jul 2025 03:00:17 +0000
Manifest next update: Mon 28 Jul 2025 03:00:17 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: RoJu1MacvrQOxoEL1W8BA+1b54wZoSluyme7AN4J9GE=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ef:75:99:db:96:86:06:a8:b5:e5:06:8e:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jul 27 03:00:17 2025 GMT
Not After : Jul 28 03:00:17 2025 GMT
Subject: CN=d1abb5597c5ee4e52e0d74ca9cafa5dd9d694dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:bb:7f:3a:38:20:5c:15:c8:f7:97:16:b1:
2e:c1:6c:cd:69:10:6b:b7:de:74:73:92:e7:64:66:
ca:7e:a7:fc:0d:2b:a1:41:fc:58:bd:05:68:df:25:
d5:2f:bf:8a:58:51:b6:6b:7b:16:e0:8a:1a:7a:58:
33:5b:1a:9e:9f:e2:f4:07:65:8d:61:27:da:ed:08:
f7:c3:b5:d2:f4:47:16:fd:25:60:73:68:85:e2:a7:
5f:e6:f1:1a:98:da:e3:5b:81:ac:ba:59:45:aa:c9:
72:0e:88:a8:ec:1b:07:d7:9a:00:d6:b9:a1:6b:9a:
df:a6:15:98:ce:32:c5:40:94:55:61:b5:ce:4f:9e:
7b:d0:7f:60:34:69:b4:80:42:d1:7b:a2:56:82:ce:
07:d6:2d:a0:b4:a6:6d:7e:83:f2:4d:47:8d:72:62:
7a:9e:46:ef:ee:3b:98:89:5e:fc:34:99:73:e9:c9:
30:6a:08:f5:c1:89:99:ea:bb:c5:9d:d1:c0:2d:ba:
43:65:bc:c9:6b:70:f8:42:17:89:3d:a7:6c:f6:a5:
13:93:a8:55:6a:91:7a:c3:02:f7:f6:4b:36:98:ff:
a9:4b:80:dc:e2:02:af:69:a3:66:4a:92:fe:23:ff:
fb:9b:ae:19:34:5d:1f:4e:f3:ad:46:48:4f:e5:96:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:B5:59:7C:5E:E4:E5:2E:0D:74:CA:9C:AF:A5:DD:9D:69:4D:C9
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:97:45:29:fa:97:79:82:5a:c6:ea:93:d8:1b:a1:03:86:45:
44:85:62:5f:0b:9d:e2:72:df:34:73:67:33:d0:0e:5f:70:e2:
6c:26:da:90:95:ae:0a:fd:89:a7:6f:96:30:a1:1f:5c:ed:27:
29:51:84:5d:ba:e5:a9:2a:df:08:e1:2a:69:25:7d:de:cd:49:
1d:8b:9c:4a:c8:df:aa:4c:54:4b:76:70:7a:82:9a:8c:6b:be:
b3:1a:92:d9:ea:97:0f:60:5b:0a:06:16:a7:ba:d6:5a:d4:ca:
80:1b:76:44:4c:49:89:23:7f:a7:e5:5a:60:15:ec:fe:83:a2:
f2:16:d2:49:c9:50:9e:e1:1a:46:48:6d:84:21:14:54:71:f3:
29:a3:34:ca:9b:fa:f2:36:4b:31:c9:8a:9a:0a:b5:fe:8c:56:
7f:03:6f:4a:0b:c4:80:c5:fa:19:23:34:95:74:ba:83:01:2f:
03:8b:ff:10:93:33:c2:5e:55:d5:81:f6:d5:b1:32:d0:cd:83:
1d:4c:9e:3f:18:7e:b4:eb:d6:23:3a:db:1c:1d:62:52:8c:6d:
47:44:7b:82:cb:9c:8b:85:c3:07:ec:fb:8b:16:e4:e6:ef:1f:
e2:6f:2d:29:df:c1:03:17:2d:0d:d2:0f:01:7a:5e:09:5b:0c:
72:f3:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:34 2025 by rpki-client