Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: 1fxKYOF6glumgswcxkhvKq5inD3hFgvr8TyGVMmt07I=
Subject key identifier: 5B:0F:CF:2B:C3:97:00:54:AE:89:22:09:09:B2:9D:31:2A:6D:7F:C2
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019964DA69409C55E035E57FBCDBC7BFBA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0DBC
Signing time: Sat 20 Sep 2025 02:00:59 +0000
Manifest this update: Sat 20 Sep 2025 02:00:59 +0000
Manifest next update: Sun 21 Sep 2025 02:00:59 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: 6IXm8FQpBfRH1RjnoZpcd05hTnN+RUNK8nbdXc83Erc=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:da:69:40:9c:55:e0:35:e5:7f:bc:db:c7:bf:ba:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Sep 20 02:00:59 2025 GMT
Not After : Sep 21 02:00:59 2025 GMT
Subject: CN=5b0fcf2bc3970054ae89220909b29d312a6d7fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:41:44:1b:2d:33:0d:f9:67:1e:3e:05:5b:
7c:cd:e1:c9:2a:ab:a2:31:61:8f:fc:7e:35:60:68:
86:d9:7f:55:e1:83:bb:1c:8b:ff:1b:20:bf:6d:1d:
64:89:22:b5:c3:00:b1:2e:b0:42:c9:89:84:bb:4a:
d5:27:01:ab:aa:d9:5e:fe:ed:b8:72:aa:da:6f:2c:
35:95:d9:fc:32:a2:d5:4e:a1:ef:5e:a3:65:26:4c:
0b:12:e9:ce:cf:9a:97:b8:74:88:e1:c5:08:6a:88:
f3:5d:ba:75:f1:5e:bc:42:18:30:33:b8:1a:46:97:
78:fa:82:fc:14:be:f5:3b:fa:23:e0:5c:bd:86:e2:
3c:79:24:5e:6e:58:e3:76:6a:30:84:75:4b:39:f6:
21:5b:81:cd:13:c2:b1:ae:28:f6:2d:62:23:6e:63:
31:61:ba:c9:c6:30:c6:f9:8d:a6:2b:31:3f:27:4b:
00:17:89:78:f3:71:0a:cf:bf:38:8b:9f:69:08:20:
8a:ee:8f:12:9b:8c:a9:ae:b8:8c:bc:cd:8c:46:9a:
86:f3:77:c4:1d:d1:63:00:22:c9:4e:9e:99:e2:93:
08:ba:86:8e:4e:16:cb:ac:0e:a5:86:c2:28:14:7d:
d0:36:34:26:d1:fd:ac:44:e2:05:0b:34:4e:49:d5:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:CF:2B:C3:97:00:54:AE:89:22:09:09:B2:9D:31:2A:6D:7F:C2
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:95:0c:1e:a5:1c:05:f9:13:0b:63:0c:51:51:2c:ea:48:
a2:0f:4a:ae:16:1b:55:19:90:4c:3d:0e:a0:39:3b:84:10:8c:
8f:e1:d2:b9:f0:34:26:f0:21:4a:88:1a:36:bd:54:fd:a0:3c:
cb:b7:43:e9:14:80:b0:ce:bd:ad:1b:8d:98:a5:de:4f:ed:bb:
d9:0c:61:ab:ee:a5:58:4a:df:5f:92:8e:9b:2c:b2:63:fa:19:
7e:4b:41:86:11:16:a4:4e:1f:0a:6f:ef:3e:a0:0a:03:68:e2:
46:16:23:89:4e:0c:62:84:0d:ac:04:b8:42:92:c1:1a:79:7d:
0f:a0:be:15:38:36:57:43:1c:d5:35:9d:55:35:77:5b:f8:db:
65:c8:29:54:a4:2f:cc:af:31:03:1e:f1:92:34:77:ef:66:f0:
86:9c:3e:9f:04:24:07:b8:76:52:28:ec:7c:07:91:cb:4a:9c:
2f:74:f7:39:ea:6c:6a:36:54:a3:07:ec:cf:2b:1f:7b:54:a8:
34:65:85:4c:55:99:74:65:77:48:f9:8e:31:e5:83:6e:9e:a1:
c2:3b:39:90:a6:9f:bf:30:a0:90:4f:93:3d:7e:6b:91:80:b4:
cd:ad:64:69:76:6d:0a:0c:9c:ec:87:81:dd:fb:da:f4:4b:b2:
c4:f9:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 10:52:51 2025 by rpki-client