Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
File: KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft (raw, json)
Hash identifier: 2Y64mZg3ytUA6eGJ6pDd6PmhrdrpfdK9e0mQ1iYjt+4=
Subject key identifier: A6:A3:EC:4A:A5:08:35:11:F5:B2:27:CE:B9:94:52:84:C4:F4:2D:1B
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 019849667450824181E64DB8B2BBCF140B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
Manifest number: 0AE7
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: 0i9Bsr9ABLnx3mgPWtu21_vME3g.roa (hash: TMrcqTSOi1Ov7CcLLSWohgeiaaCi8xEADwSrQIF/DCo=)
2: KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl (hash: 5yj6rnI7Ayr+ARHGxJ+BtQTgMAO7ZCDQs93VXEwRINY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:74:50:82:41:81:e6:4d:b8:b2:bb:cf:14:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=a6a3ec4aa5083511f5b227ceb9945284c4f42d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:3f:a2:b8:21:7d:04:f0:b6:d0:3b:81:19:
98:8f:1b:45:ca:ec:b2:c7:2c:dd:17:45:c9:c4:00:
e8:40:21:92:80:e7:a7:fa:94:66:1e:ac:9e:a7:aa:
61:7f:bd:95:d8:d7:d5:28:21:c3:05:85:3d:a5:e9:
bb:36:eb:3c:a6:a7:12:e0:29:cd:b9:a8:ad:99:18:
25:9f:b2:f7:5a:50:c9:78:a6:92:c4:09:cb:17:81:
09:c4:30:e0:8f:3b:fe:d8:b3:b7:79:ee:c5:e4:92:
e8:79:ac:dd:ea:72:23:be:09:45:1c:43:a3:82:1a:
0c:94:07:5b:66:f3:3f:d7:f2:99:b4:aa:63:c8:c6:
b7:5d:31:2e:1f:21:e5:38:df:76:86:fb:07:03:31:
f4:04:5c:66:9e:1a:44:50:a2:5d:a9:16:a4:fd:06:
61:da:7d:c1:fc:ae:21:11:10:d0:e3:f8:64:9f:87:
a8:c0:68:cf:f4:c2:df:a1:8d:4b:8a:7d:19:d3:82:
8f:7d:b8:67:04:1d:85:8c:cb:dc:67:f7:9d:5e:6b:
b1:4f:d5:a2:6e:6b:42:44:bc:e9:be:fe:ab:e1:93:
a4:6c:81:98:72:48:39:41:af:7f:91:de:9f:0b:20:
3c:dc:b3:b4:e4:49:51:8e:f8:dd:27:f4:f9:a3:f7:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:EC:4A:A5:08:35:11:F5:B2:27:CE:B9:94:52:84:C4:F4:2D:1B
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:11:e2:a8:e7:85:c7:7c:43:c3:18:e2:78:df:bd:4e:0f:
c7:48:c8:56:01:35:13:ff:48:a8:ea:dd:de:95:98:bf:4b:b1:
21:5b:7e:b1:21:e7:c9:84:6e:80:85:e2:64:36:cd:43:1d:8c:
5a:e3:7a:ad:21:28:60:58:a3:f8:fe:1f:dd:80:11:e7:c7:1d:
8f:41:d9:d4:51:4a:f0:62:cb:26:0f:39:f2:23:e3:86:63:29:
47:44:5f:d2:98:6a:64:23:09:07:b5:58:5a:c8:f2:e2:54:74:
ae:9c:b4:d1:47:f0:c4:76:aa:79:49:fa:f2:4f:9c:72:63:e5:
cb:e6:96:d1:96:cc:6b:49:7b:16:f1:fd:3b:8b:43:f2:21:59:
81:a4:f1:0b:ca:0a:3f:e9:bb:20:8c:f8:1c:ec:ac:8d:32:54:
1e:1c:15:1f:dc:98:a9:99:6f:76:11:35:a1:93:45:71:74:c5:
cc:64:f8:2f:ab:57:f2:11:ce:24:26:04:13:8b:8e:27:37:06:
01:04:1f:1a:8f:6e:49:9f:a1:7a:32:11:66:6e:1a:ba:f6:42:
55:43:47:18:14:de:b8:c3:55:53:e0:ce:1a:bf:e8:56:b4:a5:
92:fe:4a:66:0b:a4:55:e4:a1:19:e1:17:c9:30:01:5a:d7:83:
25:07:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:05:05 2025 by rpki-client