Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: 8vYGL8e06b/0t8JQ9vjs7DxhE/d3bgIB296wHCXgktA=
Subject key identifier: 1C:4C:47:10:A9:42:A6:C6:58:E0:F3:AE:80:4B:59:10:30:00:2B:CA
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 01984B54F4693B061AB4C9964EA95889E9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 087F
Signing time: Sun 27 Jul 2025 10:01:55 +0000
Manifest this update: Sun 27 Jul 2025 10:01:55 +0000
Manifest next update: Mon 28 Jul 2025 10:01:55 +0000
Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: z3JUUX7TBbOfEra9ag5QYm5nRvrn4KxvczXZ0qypdss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f4:69:3b:06:1a:b4:c9:96:4e:a9:58:89:e9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Jul 27 10:01:55 2025 GMT
Not After : Jul 28 10:01:55 2025 GMT
Subject: CN=1c4c4710a942a6c658e0f3ae804b591030002bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:a2:dc:ec:a4:27:11:ba:1f:d9:10:8e:37:
39:1d:bb:af:44:50:04:26:69:d9:69:ac:32:45:9d:
0d:a0:57:a4:24:c0:0d:5a:da:64:c7:c2:92:84:c6:
02:86:6f:3e:34:7c:14:76:64:dd:e2:71:90:a9:b3:
cc:dd:43:55:16:7d:0b:5d:69:4a:84:90:04:d9:0d:
61:d6:3b:1d:fb:33:8b:08:a8:27:09:f6:87:5b:73:
2d:1c:c1:09:da:e7:7d:92:d0:24:0a:84:bf:e1:1b:
47:8a:38:4d:03:7d:a8:b0:f7:74:aa:90:9a:1b:f2:
6f:06:4b:cc:61:58:b5:0e:6e:6f:56:98:f9:f8:2e:
50:04:2e:30:17:26:56:05:6a:7d:fa:dd:31:7f:95:
15:be:ee:96:60:3e:3a:79:cc:f3:b9:24:e1:03:38:
2d:0b:29:fa:48:11:eb:91:4b:c6:4d:1f:d6:d8:8d:
31:d3:a0:62:2c:f9:4c:9c:79:2c:f0:38:ea:94:6f:
c3:01:21:a3:a5:0d:d7:de:e9:3c:db:6f:e9:4b:01:
c8:c0:1d:12:8a:30:12:27:d2:f9:c5:bd:60:18:89:
b8:be:62:89:2e:6e:eb:2a:a1:f8:81:04:56:d2:f8:
34:41:3d:27:09:73:12:e7:e8:6b:93:63:0a:87:62:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:47:10:A9:42:A6:C6:58:E0:F3:AE:80:4B:59:10:30:00:2B:CA
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:70:86:a5:b9:0a:63:35:47:ee:62:9f:75:3a:0c:22:3e:
5a:50:ce:5c:2f:66:6b:2e:31:1a:82:53:c5:d0:8c:8d:13:a1:
af:dd:83:13:18:98:f6:b5:c9:87:77:c1:c3:32:d4:2a:4e:07:
c9:26:bf:f2:4f:05:b0:fe:94:73:31:f3:1c:eb:d3:1e:3c:81:
b9:dc:3a:f8:13:d2:2c:3f:cf:4a:01:bc:98:ae:30:a9:4a:40:
cf:e9:e1:e3:bf:58:20:74:35:73:05:90:88:20:e7:00:a1:fe:
ef:7f:4b:c8:ff:0d:ed:a2:87:7f:cf:40:91:12:89:81:03:11:
d8:21:77:cf:2e:a6:90:42:55:bb:71:6c:73:95:14:1c:2f:23:
d8:ac:01:b4:96:d2:92:00:92:b6:7f:05:55:e9:49:b2:58:81:
df:f9:cc:80:04:d6:41:b6:db:05:94:4e:2e:d6:f3:32:22:2d:
f1:0c:78:3e:3c:78:92:fe:48:95:da:93:34:c0:4c:89:9e:33:
0f:e2:d7:63:fb:e6:fe:09:0c:d9:97:20:84:d8:4c:46:a5:13:
ae:af:68:40:73:3b:a5:58:f9:f8:ef:8b:c0:77:5b:7d:a4:02:
7d:4f:2e:3f:77:3c:be:2c:20:c8:73:5a:32:26:f5:74:f2:57:
ae:06:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:27:41 2025 by rpki-client