Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: /bov90P3EZ8t5GIm0YQjF4RjAlV//Anw1GEpULrzhJA=
Subject key identifier: 81:CD:74:BD:27:33:8B:13:2B:9D:4E:81:AE:EB:F6:7B:78:C0:45:27
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 0198C79265FCD5DBCA032D0D455BE3BA67D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 041E
Signing time: Wed 20 Aug 2025 13:01:57 +0000
Manifest this update: Wed 20 Aug 2025 13:01:57 +0000
Manifest next update: Thu 21 Aug 2025 13:01:57 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 4WLdS1l8+p2guEUT5naHqeDHJTR5+8WXUzIJrCOGOk4=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:65:fc:d5:db:ca:03:2d:0d:45:5b:e3:ba:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Aug 20 13:01:57 2025 GMT
Not After : Aug 21 13:01:57 2025 GMT
Subject: CN=81cd74bd27338b132b9d4e81aeebf67b78c04527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:d5:8c:64:9b:e4:4c:81:7b:40:7f:9b:07:
48:ed:ce:95:71:4c:e4:10:bf:4c:29:61:b8:42:4b:
4a:56:df:88:39:8b:64:d9:2f:0f:9b:e2:fc:73:ca:
06:23:68:08:f7:78:6a:90:e6:ab:73:d9:de:df:4f:
53:2d:62:97:4b:a1:d0:eb:83:6b:f3:0e:9a:b8:dd:
1e:e2:bd:d9:40:ef:87:9c:13:d6:1a:ff:51:6b:63:
16:d9:b6:16:82:0a:84:9e:7f:5f:58:c0:3a:03:a5:
ed:aa:19:18:b6:b3:72:8d:2a:d6:e5:d7:23:7e:75:
01:69:7c:45:79:a1:55:71:89:23:8c:a5:02:30:1a:
e2:03:0d:ba:9e:fa:4c:74:df:d2:9e:2b:06:0d:e3:
91:cb:27:3e:74:75:f8:ae:25:1a:91:b7:9c:1c:54:
94:a5:a4:cf:da:1f:c3:4a:9d:2a:a3:3e:dd:19:c8:
e2:c2:8d:a2:fb:86:a1:a8:21:5c:c4:6c:6f:1f:b1:
7a:1b:74:3d:ff:8f:58:64:71:23:73:a8:63:7f:89:
83:09:1c:f1:7f:dd:5a:89:f5:32:2d:30:f9:2e:73:
b1:21:da:34:dd:2e:a1:a3:b3:cf:ca:90:f4:ff:9c:
2b:dc:a3:1c:96:51:71:6f:42:19:f5:b0:0b:7b:e3:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:74:BD:27:33:8B:13:2B:9D:4E:81:AE:EB:F6:7B:78:C0:45:27
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:9f:ba:6f:c4:d9:8e:30:fb:be:21:d3:3c:92:0c:b9:1b:
db:19:3b:d3:ee:ee:f8:f1:65:23:0b:c9:f9:22:86:9d:77:19:
56:06:2a:d0:7a:d4:56:eb:55:58:82:e9:eb:66:a5:0c:ee:ab:
46:f3:a8:57:7d:0d:f3:5c:96:01:73:17:9c:a8:56:cb:2d:09:
26:e5:80:3c:8c:22:1c:59:a0:2e:a6:97:79:26:b2:e5:b7:fe:
8d:bb:bd:01:f5:80:80:e4:b9:0b:03:52:a8:d4:1f:1d:26:35:
56:59:87:f9:56:6a:eb:e2:2d:d3:0c:96:44:42:1b:1c:67:ac:
da:9a:b8:42:01:f3:24:72:cb:56:d8:c5:07:1c:a2:b7:0d:19:
6a:e4:54:5a:68:c7:7c:93:7c:05:8e:1c:3a:1e:a2:88:fe:8e:
17:5d:93:07:6e:b1:35:71:be:db:d9:4b:96:bc:ec:48:b4:19:
70:ca:04:a2:0c:0f:bf:92:87:60:af:3f:5d:24:97:9b:9f:fb:
61:c0:ca:76:b3:da:8a:c7:4b:7a:00:55:4e:69:3a:b4:40:55:
02:49:76:46:7c:1b:8e:ba:e1:e7:e1:2a:88:11:82:1c:21:71:
31:76:a5:c9:5c:fb:1d:03:2f:0d:e3:48:c5:a4:1c:9f:09:99:
e1:f4:89:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHkmX81dvKAy0NRVvjumfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx
ZDliYjQwHhcNMjUwODIwMTMwMTU3WhcNMjUwODIxMTMwMTU3WjAzMTEwLwYDVQQD
Eyg4MWNkNzRiZDI3MzM4YjEzMmI5ZDRlODFhZWViZjY3Yjc4YzA0NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZrVjGSb5EyBe0B/mwdI7c6VcUzk
EL9MKWG4QktKVt+IOYtk2S8Pm+L8c8oGI2gI93hqkOarc9ne309TLWKXS6HQ64Nr
8w6auN0e4r3ZQO+HnBPWGv9Ra2MW2bYWggqEnn9fWMA6A6XtqhkYtrNyjSrW5dcj
fnUBaXxFeaFVcYkjjKUCMBriAw26nvpMdN/SnisGDeORyyc+dHX4riUakbecHFSU
paTP2h/DSp0qoz7dGcjiwo2i+4ahqCFcxGxvH7F6G3Q9/49YZHEjc6hjf4mDCRzx
f91aifUyLTD5LnOxIdo03S6ho7PPypD0/5wr3KMcllFxb0IZ9bALe+PPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHNdL0nM4sTK51Oga7r9nt4wEUnMB8GA1UdIwQY
MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt
OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3
LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfISfum/E
2Y4w+74h0zySDLkb2xk70+7u+PFlIwvJ+SKGnXcZVgYq0HrUVutVWILp62alDO6r
RvOoV30N81yWAXMXnKhWyy0JJuWAPIwiHFmgLqaXeSay5bf+jbu9AfWAgOS5CwNS
qNQfHSY1VlmH+VZq6+It0wyWREIbHGes2pq4QgHzJHLLVtjFBxyitw0ZauRUWmjH
fJN8BY4cOh6iiP6OF12TB26xNXG+29lLlrzsSLQZcMoEogwPv5KHYK8/XSSXm5/7
YcDKdrPaisdLegBVTmk6tEBVAkl2Rnwbjrrh5+EqiBGCHCFxMXalyVz7HQMvDeNI
xaQcnwmZ4fSJpA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:37:25 2025 by rpki-client