Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: ra/1bX+eZ8KoGPrjvMml4HWqc5Ncom8acfkn0Cg5P2g=
Subject key identifier: 02:5D:DE:29:93:E7:84:BD:2F:3E:8F:A2:87:05:59:95:97:D3:21:5B
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0199270E792DE29A1A7BDB7A3F12CF020A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 0666
Signing time: Mon 08 Sep 2025 02:01:23 +0000
Manifest this update: Mon 08 Sep 2025 02:01:23 +0000
Manifest next update: Tue 09 Sep 2025 02:01:23 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: ZrQgFuCiQcPY6PkZ361yqh/kK++0evF1cJsxD2Pd3Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:79:2d:e2:9a:1a:7b:db:7a:3f:12:cf:02:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Sep 8 02:01:23 2025 GMT
Not After : Sep 9 02:01:23 2025 GMT
Subject: CN=025dde2993e784bd2f3e8fa28705599597d3215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:cf:c8:be:85:68:da:a8:ad:81:ca:e4:aa:
5c:4e:3f:40:06:78:6b:81:04:03:64:86:4c:07:d5:
36:50:8b:3c:25:ad:a7:f0:7f:28:58:c0:4e:ec:43:
f4:4f:0c:59:d3:ff:53:6c:15:58:84:13:fb:2b:b3:
00:e5:a7:57:9d:85:7a:f7:40:f7:0b:60:01:a8:29:
1c:3a:69:3d:d4:ee:d6:53:08:f1:a6:8e:76:51:9e:
a0:67:dd:93:99:d0:4c:0f:8f:d5:0a:de:e9:86:fa:
ab:eb:bd:4a:be:72:0e:c1:70:49:c2:31:38:da:f3:
3c:4f:47:b8:40:22:e4:31:50:e7:3e:de:d5:29:5c:
0c:c3:a1:2b:5b:59:59:82:84:59:37:0a:22:6a:7b:
27:d5:ca:f7:f8:69:c8:c0:d4:b6:00:52:a4:96:b2:
72:44:54:de:f2:4c:0a:c6:73:0c:1d:b7:02:c9:f0:
98:d0:a4:52:ab:74:9a:7c:62:f1:1b:6e:6b:63:9c:
ae:38:8b:96:55:49:11:20:82:2c:fe:b5:a2:bc:ba:
49:a9:76:93:59:b1:fb:f7:47:15:b7:c0:2f:2c:75:
18:a9:0b:8e:c9:30:f8:49:d4:82:01:eb:70:8f:14:
da:d7:1b:51:e9:3d:90:9a:9b:53:16:03:68:d6:71:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:DE:29:93:E7:84:BD:2F:3E:8F:A2:87:05:59:95:97:D3:21:5B
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:66:ab:f5:99:9b:46:71:80:9f:5e:46:2c:db:38:8c:57:
46:58:21:fe:d3:ac:a8:34:a8:9f:6d:21:e2:8e:95:8c:d8:e6:
df:1e:57:8c:84:09:ba:87:16:95:80:31:98:96:63:01:da:a1:
b4:fb:28:e4:84:d7:28:86:0f:df:01:3e:c6:7f:80:dc:56:b2:
e3:ab:9f:9d:43:a9:c2:92:fa:1c:87:70:e5:b7:12:d6:45:63:
91:27:a0:45:8a:2b:94:5e:ca:8b:cc:ed:6d:96:11:ef:1a:c3:
72:35:2f:e8:20:9c:33:7b:5b:fb:8f:22:51:a2:85:8f:3d:31:
4f:d3:9b:b8:39:a8:2b:d8:22:1c:8b:ea:65:ed:f3:28:03:8d:
ae:4b:f7:72:0b:1f:73:a4:27:18:85:fc:f3:be:0b:0d:58:da:
b7:81:17:e2:82:22:0a:00:53:cc:e5:fb:b6:39:0d:9a:fc:d3:
e2:f7:b2:e7:69:94:04:d3:88:ee:b5:e0:e1:da:74:a5:17:01:
15:cf:cf:ce:77:e4:26:1c:0f:4f:ab:c1:b2:0b:3d:11:be:1f:
71:5a:1a:f1:94:20:db:e9:d8:b3:d0:95:8e:7a:75:77:1a:f3:
8a:31:08:d6:89:e2:cc:0c:f7:05:f1:83:56:96:61:ae:c8:2e:
58:56:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:49 2025 by rpki-client