Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: stItZ361xGzxo2ocso6vgDy0POLeBBoVZYNG6xzfvUY=
Subject key identifier: BD:41:B4:DC:AF:22:F5:2E:56:38:23:99:7B:6D:85:9E:60:3D:79:92
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019849D3D0C3B0FF9D49117CF8F5713166CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:01:14 +0000
Manifest this update: Sun 27 Jul 2025 03:01:14 +0000
Manifest next update: Mon 28 Jul 2025 03:01:14 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: BnS3ZaMC5wfM/7v7QsUp/vOO0LzlJXEf4kvUQzdhpjI=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:d0:c3:b0:ff:9d:49:11:7c:f8:f5:71:31:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jul 27 03:01:14 2025 GMT
Not After : Jul 28 03:01:14 2025 GMT
Subject: CN=bd41b4dcaf22f52e563823997b6d859e603d7992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c9:d4:2b:1a:da:07:3b:01:fe:f6:47:a7:
5b:e5:09:f1:ab:8b:91:fc:0c:87:b9:0d:b0:d0:dd:
3f:00:ba:0c:d4:f6:7e:18:f4:b8:5f:c2:61:fa:62:
21:fa:2e:7f:88:50:6c:12:08:75:44:f0:38:73:a6:
23:35:20:75:b8:c6:99:ef:cd:1b:cd:f8:53:a3:a2:
60:d1:17:c6:c3:a2:5c:6b:e7:a9:31:4d:88:89:41:
54:5d:41:50:1a:4a:a2:0b:ab:38:5e:47:0c:9b:bc:
31:65:85:bb:a9:d0:e5:c1:9f:2e:81:d2:94:db:d7:
d4:36:ef:7b:71:67:d7:67:7d:a4:46:15:6a:c1:f2:
22:1b:b6:26:13:8c:c5:f0:b7:82:bb:12:82:3f:d2:
d8:5b:02:7e:ff:3f:d7:ad:22:83:49:16:28:b9:a0:
68:fe:d7:e9:62:d2:e9:a0:54:d4:bf:6a:57:b9:d6:
65:ed:e6:e1:c7:f6:a0:3c:4e:da:f6:e8:85:56:99:
9c:a3:fb:f6:0c:01:05:95:29:e0:e5:d6:f5:96:95:
5a:ab:e5:d3:77:4f:51:3e:12:13:c7:3b:6d:fe:cd:
5f:2b:2b:87:c0:02:98:2b:32:5d:9e:02:af:6d:91:
21:f9:70:29:63:29:ad:1c:35:85:78:de:d9:3c:76:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:B4:DC:AF:22:F5:2E:56:38:23:99:7B:6D:85:9E:60:3D:79:92
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:10:22:9c:1e:92:33:7c:1d:47:39:e0:a5:fb:26:c3:5c:
bd:5e:17:09:a1:a2:4c:35:88:2b:d3:0c:f9:bd:41:85:54:9b:
69:71:ba:2b:31:fe:be:81:d4:29:55:4c:c0:52:15:e4:4e:aa:
35:06:4f:ea:79:03:6b:50:05:a1:d7:d3:d2:d9:bc:61:da:3a:
78:c4:cf:8e:0b:ba:d6:ce:4d:40:22:ec:13:c7:a3:76:35:f4:
b1:12:e9:af:3d:3f:91:5b:07:2a:bf:62:27:39:ff:fa:7a:9c:
8d:8a:29:20:ce:a7:e7:ad:41:07:a2:8a:d0:ff:c6:ab:56:2a:
5a:0f:f0:d4:e4:87:4c:7b:93:f3:b0:05:3c:02:ec:dd:b3:71:
86:c9:e5:b8:d4:3c:a4:fd:f5:0d:ee:19:3a:ed:27:5c:f3:64:
43:0c:7f:56:17:aa:1b:48:67:43:76:4e:2a:29:64:ae:bc:db:
05:9f:df:32:c4:07:2b:7c:dd:f4:25:e8:7a:54:d0:37:20:d8:
96:72:0d:17:4b:b9:89:8b:03:9e:19:19:52:73:35:c7:42:5b:
4b:7d:9e:c3:db:e3:7c:2a:e4:84:55:79:33:8d:fd:3b:a5:a4:
05:02:00:fe:a0:2c:bb:53:75:fe:64:7d:33:34:17:ed:3c:6a:
29:f2:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:50 2025 by rpki-client