Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: i5ixz1baA5vMJuj6MjZIZ9FoOsFHoxQxMxLMAaeF9Lc=
Subject key identifier: 40:FD:E4:05:DF:6F:82:E1:8E:94:38:B9:8D:2D:34:7A:A0:78:F4:98
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019853445455DFFAA205B6026A05C7AC8ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0EF5
Signing time: Mon 28 Jul 2025 23:00:43 +0000
Manifest this update: Mon 28 Jul 2025 23:00:43 +0000
Manifest next update: Tue 29 Jul 2025 23:00:43 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: ZslV5xpjNAeVv9eaeh3/Ppx03QghX1JhIdf4Tz7urdQ=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:54:55:df:fa:a2:05:b6:02:6a:05:c7:ac:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jul 28 23:00:43 2025 GMT
Not After : Jul 29 23:00:43 2025 GMT
Subject: CN=40fde405df6f82e18e9438b98d2d347aa078f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:75:68:14:bc:62:50:fe:c9:d0:50:de:95:
60:dc:8d:18:ec:5d:ed:b1:9f:72:1a:88:46:4f:bb:
9b:03:05:c5:2b:55:1f:74:e1:7b:af:d3:47:a6:05:
5b:fc:02:c1:a7:fd:1e:e7:79:9e:9f:d7:42:8a:05:
32:da:a9:72:7f:7b:38:ec:2c:d9:19:28:a8:4b:4b:
9b:65:8c:2f:2d:a6:b3:d9:e1:ae:7e:de:ac:92:28:
db:62:ea:b2:46:a2:9d:f4:6e:00:4f:d8:e7:fd:21:
cb:25:77:d0:0b:0f:87:84:a1:9e:43:10:4d:9d:3b:
01:80:27:88:fe:7f:d0:a6:8c:4b:d9:dc:21:63:a8:
b5:58:1d:ab:ae:36:54:be:65:4e:e8:5b:0a:90:10:
63:81:c6:df:ea:14:17:63:ab:98:ae:b7:ed:5d:ce:
08:ab:11:5e:05:59:62:4a:a0:86:6f:e8:f3:2b:15:
45:0e:ca:8b:04:f1:08:c3:0a:70:be:d4:38:40:61:
8a:82:24:ef:07:49:9a:05:c9:70:61:6a:f8:87:0a:
89:19:b9:de:76:fb:5a:43:d7:6a:a8:b5:d6:9c:a9:
6c:dc:14:4f:41:a3:dc:a8:79:bc:7c:bb:89:d1:81:
f1:97:33:e3:bb:c3:12:eb:a0:fc:1e:a0:02:0e:8d:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:E4:05:DF:6F:82:E1:8E:94:38:B9:8D:2D:34:7A:A0:78:F4:98
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4c:e6:fc:21:4d:43:83:b4:be:40:b6:5e:4c:98:b0:11:c7:
27:f2:f8:f8:d6:e2:6d:71:0c:c7:5c:51:ac:c9:d8:99:38:f6:
63:88:3d:72:e5:d5:8e:fa:1a:bf:02:a1:77:97:1a:04:fa:d6:
89:c8:d9:9d:56:bc:cb:c6:e8:42:28:01:c0:b1:ce:e0:49:52:
19:b8:e1:a6:f0:6a:ff:23:df:69:ca:3e:22:d5:87:b9:43:50:
f9:7b:a0:3e:73:b4:1d:18:55:3b:fd:d4:b8:dc:86:f3:3d:5f:
ca:67:18:5a:a0:d4:4c:9c:08:07:b3:45:eb:f3:9c:b3:ad:07:
ec:2f:5b:67:87:0c:89:30:57:22:fb:47:dd:9f:ca:1c:b4:35:
7b:0c:48:88:d7:77:db:bf:d4:96:6d:e1:70:46:8c:7b:0c:1e:
39:9c:5e:a6:2d:8a:e3:cb:24:a6:42:90:5b:f3:ba:13:c4:e3:
25:eb:a3:c5:b3:3b:fb:7a:8a:6a:3b:00:25:26:b4:44:c2:28:
c1:e7:ad:f5:86:6b:1e:62:b8:77:fa:f4:8e:ca:d6:74:b6:cd:
52:1f:1c:79:44:d3:04:54:04:9f:dd:cc:bd:d6:56:61:51:62:
b0:f2:75:86:d6:3d:7c:29:2c:db:aa:f8:4c:c9:3e:46:fe:60:
4c:2e:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:42:21 2025 by rpki-client