Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: 5v8RQKlSXbArOJY9ZsJ2FGTHRtnCQKIYZzfwOvaB6zI=
Subject key identifier: 18:BC:61:A9:DB:62:F0:34:A4:83:87:EF:1B:7D:D2:06:C2:54:3E:5A
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 01984AAEB22273DAE7ED6342C2C170CCF256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0C59
Signing time: Sun 27 Jul 2025 07:00:19 +0000
Manifest this update: Sun 27 Jul 2025 07:00:19 +0000
Manifest next update: Mon 28 Jul 2025 07:00:19 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: Ipq1og92pvpDVwTyJ+f9UZg/EZIr6KJhDOEfwewPCck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b2:22:73:da:e7:ed:63:42:c2:c1:70:cc:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Jul 27 07:00:19 2025 GMT
Not After : Jul 28 07:00:19 2025 GMT
Subject: CN=18bc61a9db62f034a48387ef1b7dd206c2543e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:4d:ec:8a:fe:16:e2:86:28:f5:3f:89:7d:
81:44:01:22:46:89:cf:97:5e:72:a0:b0:b7:1c:c9:
5e:a8:98:9b:f3:06:86:d0:ce:ed:65:2d:14:ce:b2:
d6:2b:88:63:01:e4:70:79:c8:66:b8:e9:fc:a6:89:
d8:cd:0d:d6:cd:8c:6b:2f:b1:53:88:5b:47:dd:e6:
3d:f0:04:1f:c0:b8:5b:b8:d8:0d:d7:79:83:c8:0b:
ac:66:30:06:ec:32:23:fa:dc:4a:0b:74:59:9e:80:
17:8f:46:99:eb:3d:24:bc:d6:b4:38:aa:12:14:1d:
43:73:ab:ee:03:87:cd:fc:ee:d5:39:15:2d:58:c1:
13:f2:8a:00:13:29:53:71:64:f4:63:fc:7e:b3:8d:
95:f8:39:f7:22:d4:c5:ba:e3:05:28:ae:88:f8:2e:
6c:67:12:2f:a5:73:1e:c8:8e:91:0b:d5:2c:60:91:
5f:d5:e2:a8:1b:aa:94:b6:1b:2e:e5:4b:63:bb:e7:
53:ce:c4:83:67:7b:e7:e8:99:d3:f7:7a:53:2a:47:
b3:db:61:d2:e0:2c:d9:ad:b2:c3:11:53:76:e0:9e:
c8:a1:1a:d6:44:c0:28:fb:67:12:df:90:30:7c:fc:
ff:d9:d0:ae:ea:e3:26:fb:40:d0:12:bb:1d:e6:f2:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:61:A9:DB:62:F0:34:A4:83:87:EF:1B:7D:D2:06:C2:54:3E:5A
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:a0:2e:9b:51:c3:7d:65:68:4c:4c:94:12:c0:ab:f1:06:
10:2f:e0:b0:89:1f:1b:1d:66:14:20:58:0c:b4:2d:be:7a:51:
2d:99:95:73:87:1f:ee:23:e5:10:c1:1c:16:c9:fa:2c:80:87:
98:a8:81:d0:90:8e:d3:ca:ef:06:80:3a:b7:10:79:f6:26:87:
88:95:ac:a6:86:53:a0:c5:de:8a:6c:08:57:7d:32:a8:41:3b:
cb:1b:7d:c2:63:a2:da:b9:9c:98:00:6d:63:f3:df:d4:1e:67:
3b:ed:8d:95:0c:61:78:32:5f:6d:98:2d:15:f6:32:28:46:19:
82:e1:c7:94:17:15:e3:62:de:dd:0a:3b:d2:d1:eb:82:70:cd:
19:df:fc:99:e5:0c:79:1e:a3:d4:bc:8b:9f:7e:91:d2:47:40:
58:59:2d:5c:5b:5f:d2:e0:08:5b:f1:d2:18:20:83:aa:28:e0:
e5:20:59:4e:e7:55:14:9e:86:25:f2:06:87:55:a6:ba:f3:d6:
92:6b:17:87:e6:e4:4f:03:8d:57:05:44:e4:2a:62:ed:ef:64:
18:40:4e:e8:8e:cd:e2:c2:b3:75:4d:b7:87:14:44:d7:02:01:
4a:58:83:4d:25:e0:ea:ee:a9:c5:75:a4:74:1f:ae:cd:6c:b4:
92:5f:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:39 2025 by rpki-client