Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: hJAgMMtuUSOMxQg2Qznp8ImfBgO/hJ1tpKDDlut9Pes=
Subject key identifier: 27:71:31:02:67:4B:9D:F2:D6:20:55:4F:30:59:CD:A8:E9:61:BE:1C
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 019847770DD3EC5C61EA399049F773985269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 0519
Signing time: Sat 26 Jul 2025 16:00:41 +0000
Manifest this update: Sat 26 Jul 2025 16:00:41 +0000
Manifest next update: Sun 27 Jul 2025 16:00:41 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: my445H3Dw4Rt0zbFGeK0BSTWXlTD2Dd5ngJ1yMLBZbc=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:0d:d3:ec:5c:61:ea:39:90:49:f7:73:98:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Jul 26 16:00:41 2025 GMT
Not After : Jul 27 16:00:41 2025 GMT
Subject: CN=27713102674b9df2d620554f3059cda8e961be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:d2:e2:d8:0a:98:ec:e4:a9:e3:3c:e3:fa:
50:97:c8:02:38:f3:66:9d:60:33:a9:77:87:9c:d9:
7b:6d:b6:42:39:7f:4a:a2:6e:bc:6d:e9:c8:f9:a0:
fd:a1:f3:ba:e7:25:d9:b7:e5:ad:35:65:3a:35:32:
a2:29:46:c4:82:95:79:16:90:1e:9d:8c:ce:c1:68:
b7:c7:08:50:86:73:c1:ec:c8:53:04:ab:bd:1d:d5:
9e:4c:a8:62:f3:30:2e:f2:27:c0:e7:18:1f:8f:e2:
35:08:e4:28:d0:57:16:aa:21:7d:c2:b1:ad:f6:ac:
f5:59:05:68:d0:3b:e8:36:1f:80:f3:96:7f:a5:a9:
5b:00:64:95:da:9a:67:c6:88:d8:36:c0:87:95:fa:
9c:1f:73:17:9c:b9:a9:eb:cf:85:3f:67:8f:52:9b:
7b:d3:16:69:30:54:49:f4:61:12:15:74:49:40:31:
98:57:c0:08:2c:7f:7d:cf:c8:0e:dd:2b:8d:93:88:
1c:2c:a5:da:44:ed:79:a3:9d:c9:42:a3:50:8c:cd:
a4:3a:86:bc:b5:b9:25:eb:4b:55:87:53:81:f8:6e:
bc:a8:c8:56:cb:3a:97:f1:3d:06:f2:50:85:42:a6:
3b:f2:32:d5:86:ca:c9:4f:d8:2f:f6:69:ec:a0:17:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:71:31:02:67:4B:9D:F2:D6:20:55:4F:30:59:CD:A8:E9:61:BE:1C
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:d6:0a:c8:ff:1e:8e:f5:39:d6:dd:a5:aa:43:73:e9:10:
1d:2e:11:63:d5:39:68:d7:eb:63:be:e6:9d:68:b0:cc:e3:2a:
6d:04:24:91:15:ba:c2:6b:6b:40:6f:8d:f6:4a:eb:9c:4c:69:
04:cc:94:d9:b9:53:d1:d9:41:d1:72:78:5f:6b:86:b8:27:dc:
af:a7:91:5a:99:af:ec:79:df:a7:a8:3d:50:30:02:0b:9e:10:
6e:39:27:c1:ce:f9:dd:77:97:50:b1:7c:af:43:8b:50:70:e4:
d1:14:4e:48:be:5e:15:6e:a5:51:d7:0a:87:05:c5:04:82:1f:
9d:c6:7b:1d:cd:f1:86:a1:4e:de:60:f1:76:8d:28:76:ce:6d:
84:5b:14:94:90:91:6d:8d:1c:7a:f1:5a:17:78:7a:64:d9:7e:
10:25:40:07:37:e4:62:5b:50:22:8b:36:54:b1:66:dd:b5:2a:
af:b8:e1:b5:74:85:d7:60:53:62:81:ba:72:5a:71:68:9f:a1:
cf:d7:86:d8:f5:bf:81:02:df:0a:d7:e1:2c:86:01:4b:00:74:
ab:1d:cb:b5:49:c8:39:6a:22:73:59:fe:50:02:02:96:d5:2a:
a4:77:61:41:a5:79:30:95:cc:37:06:4b:a0:95:47:be:c8:52:
21:49:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:58:16 2025 by rpki-client