Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: qa5BP0FJx9VNlMupPDFWQyRGZCBaWMtz/oHE6+VHwic=
Subject key identifier: 4F:9D:E9:FE:03:32:53:C1:F9:7C:F4:41:CB:AC:38:DE:DF:A1:39:76
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019847778C70BA38247153362088035588BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 09DD
Signing time: Sat 26 Jul 2025 16:01:13 +0000
Manifest this update: Sat 26 Jul 2025 16:01:13 +0000
Manifest next update: Sun 27 Jul 2025 16:01:13 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: PgtH40s077V+XdL0gwcW3lK4BML1iwWdl6/5cfpohG4=)
2: ZHD5dava3w2N4kCoC2nNmHFgkaE.roa (hash: gwDwlr/q6X598Hy0yc+sN6UItT1+TQ/iMV+TYJ9WvQ8=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=)
5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:8c:70:ba:38:24:71:53:36:20:88:03:55:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jul 26 16:01:13 2025 GMT
Not After : Jul 27 16:01:13 2025 GMT
Subject: CN=4f9de9fe033253c1f97cf441cbac38dedfa13976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:35:90:fe:9c:ca:60:20:90:9e:2c:db:a1:
64:42:59:4a:3d:68:f6:95:54:33:ec:d9:27:5e:25:
bf:ce:32:ea:12:31:49:d8:13:b0:8e:45:b4:3d:0f:
6e:21:71:41:4d:0b:2a:a9:f5:44:b8:52:5e:85:15:
a8:65:6d:a9:a2:4d:99:9f:69:c7:36:81:15:77:53:
52:4f:fb:94:e3:0f:a6:47:2f:87:aa:c7:c5:d6:2e:
91:36:9f:b0:b8:d5:f7:00:57:bb:5e:06:a8:a8:7b:
c9:7a:00:67:3e:63:92:26:5c:71:f7:05:c8:a6:dc:
c3:6a:52:5d:76:47:cc:1f:fa:92:7e:d5:17:06:4e:
2d:0e:09:7f:bd:c9:f1:de:73:2b:63:54:b6:b0:88:
68:0b:76:00:88:05:da:0c:a9:5a:86:85:8c:11:a6:
47:e9:35:60:86:f8:b6:66:27:53:01:c7:89:e7:cf:
0a:2d:c4:99:bb:68:cd:87:1c:a2:10:f9:3f:3a:c3:
5e:df:4c:b9:3f:e0:5b:6f:23:dd:68:fc:ea:4d:ac:
0d:58:fc:1e:62:99:58:da:cc:29:5f:15:e6:a9:45:
31:c3:56:c7:35:77:8b:51:10:b5:a8:98:d2:db:d4:
a2:72:e1:b2:48:b2:64:42:d7:c5:89:1c:86:7c:c4:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9D:E9:FE:03:32:53:C1:F9:7C:F4:41:CB:AC:38:DE:DF:A1:39:76
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cb:7a:e4:37:c0:3e:eb:1b:cf:3a:51:5e:21:b1:a8:37:91:
ac:fc:e9:1f:f9:8c:bc:4d:44:3e:88:29:0e:27:82:2e:84:41:
63:2e:86:8a:8d:ea:4f:79:a2:b7:d6:b7:27:ff:58:b8:cd:d9:
fc:7e:5c:20:30:6a:5c:23:50:cd:8c:9d:65:e1:ae:ae:fd:4f:
13:87:2d:67:e7:47:9f:fd:cb:50:a5:eb:f5:e9:5e:8c:8b:41:
15:3d:da:83:e4:07:9c:de:12:27:5a:d1:7f:10:66:89:96:fb:
41:ce:db:09:4c:1e:d5:62:3f:3b:5e:ff:34:d1:b3:a5:4a:fc:
3b:f0:4b:d1:33:2e:47:7e:e0:46:0f:53:80:c8:6a:a3:9b:4c:
75:47:2e:a4:4b:06:78:e6:7f:4e:ee:3a:84:ef:f9:d4:47:60:
f6:db:6f:62:0f:43:97:67:c2:5b:e3:29:96:38:62:7b:f1:4b:
f1:96:08:15:82:99:59:b5:4e:30:26:4b:1b:5b:75:e8:c8:1c:
0e:00:f6:c5:f8:f9:7d:8d:78:70:43:35:f9:63:51:a4:46:e7:
ef:28:b3:21:c1:6b:b1:8c:14:be:2e:96:9f:05:d1:bb:52:c2:
44:45:20:ca:58:1f:84:43:5b:da:5d:7d:64:a4:c7:09:4e:76:
1d:e1:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:06:11 2025 by rpki-client