Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: TJQDzrdrnGxz6FZ024gslfM7kzDm8zqul4NejcqNWCY=
Subject key identifier: 39:52:41:D3:9D:F1:31:42:D3:EE:1C:79:85:95:1E:DC:1D:A4:3E:36
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0198469AD3120D47929278528B722C2F090F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 14FD
Signing time: Sat 26 Jul 2025 12:00:08 +0000
Manifest this update: Sat 26 Jul 2025 12:00:08 +0000
Manifest next update: Sun 27 Jul 2025 12:00:08 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: +oz6rZgKXY8IgKmySfQY1DCFqrogpOS/6XRGjb7jbWE=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:d3:12:0d:47:92:92:78:52:8b:72:2c:2f:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Jul 26 12:00:08 2025 GMT
Not After : Jul 27 12:00:08 2025 GMT
Subject: CN=395241d39df13142d3ee1c7985951edc1da43e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:46:32:26:32:03:28:37:6e:55:f6:8c:81:
69:8a:3c:cf:dc:0b:d6:5c:63:f4:95:5c:b9:ef:52:
9a:af:ca:93:5d:78:18:40:44:bd:bd:e0:fd:4e:4b:
cd:03:b8:5f:13:cd:ef:78:a4:99:80:6f:2c:6f:c5:
96:6e:14:b2:75:66:99:d3:08:06:73:54:f6:8f:bd:
e3:23:df:d0:ec:6a:31:f4:00:fe:cc:68:72:b6:1b:
7f:39:cb:8d:3e:19:67:76:26:21:3c:33:63:65:91:
f1:dd:09:82:58:66:9d:ae:46:46:2e:a8:01:89:01:
eb:24:bf:c0:6e:be:ee:fa:a6:42:e4:47:6e:13:b4:
db:d5:89:84:95:6a:c9:cd:98:62:c6:8b:0a:c7:29:
49:f9:8f:d4:5b:8f:03:d0:f1:75:55:75:27:bf:e9:
a6:cc:58:43:4f:3e:c5:59:13:00:c8:53:81:a5:ed:
3c:ed:17:73:4d:2c:86:7c:7e:d1:cd:de:1d:50:b0:
ae:c9:33:59:56:44:c6:fb:bc:6c:c1:bf:ac:89:6c:
99:98:ae:59:a1:7d:c3:dd:ce:af:d7:cf:d8:96:db:
a7:68:17:d3:50:ff:55:ef:2c:a9:1a:8e:02:0a:58:
e7:88:49:c1:2c:27:8e:e6:fe:89:43:0a:98:57:12:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:41:D3:9D:F1:31:42:D3:EE:1C:79:85:95:1E:DC:1D:A4:3E:36
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:3c:f9:74:9a:dd:10:73:41:99:f9:30:1b:c9:dd:7f:9d:
51:a6:57:ee:20:ce:86:73:f5:57:cc:96:0d:67:19:d1:0b:9a:
ae:5f:f7:70:3e:44:ca:1d:b2:91:53:7c:ae:6b:42:b4:cf:02:
07:12:7e:d6:ea:54:68:cd:fa:40:2b:b8:56:3b:77:61:ca:39:
97:8d:82:37:3d:41:93:c0:31:e4:da:8e:12:ea:e2:d8:30:e6:
e0:14:42:77:e7:43:90:13:a3:94:f8:9d:2a:7b:21:b2:7e:39:
65:74:5c:e3:1a:45:9f:85:f5:2e:d5:22:39:53:56:d7:49:94:
6a:53:e3:b8:d7:21:23:0a:af:7b:5b:a9:bf:53:67:a0:c7:20:
b9:74:3f:f9:6f:d3:5f:2b:24:c8:d4:27:49:49:ae:b3:c2:5d:
cb:16:41:b6:0e:40:1a:d3:2e:f2:fc:54:d4:76:13:e1:90:47:
2e:5c:81:69:0b:c8:31:3d:01:83:e3:06:10:06:d9:b4:87:31:
0a:de:cf:e1:aa:f1:1a:e1:07:43:39:b4:2d:aa:09:f4:03:ed:
f9:e7:d0:59:48:f1:59:e7:e4:70:c2:ff:39:af:72:24:cb:65:
91:bd:05:11:60:2b:c8:38:3f:e3:51:7e:30:06:88:3c:aa:8f:
6d:03:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:42 2025 by rpki-client