Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: OELQM3BHfCGxnG4Fy98JWOE8OSyk1p0XH/Z+EWtLzlo=
Subject key identifier: F4:94:B0:BE:22:DF:81:E0:7F:88:F3:2F:3D:F0:DA:09:43:C2:BA:FF
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 0199228CDC416E528945169A7465BCCBCEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: WifVeWElB+QJsMSD1Jwk+rlnnSCXqQaYqN6416HIAYs=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:dc:41:6e:52:89:45:16:9a:74:65:bc:cb:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=f494b0be22df81e07f88f32f3df0da0943c2baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:e3:21:63:d7:4c:eb:b6:1f:f6:93:f2:6c:
2e:af:65:bf:17:82:df:fc:23:1d:94:f7:e5:45:70:
5a:fd:87:8a:85:2c:93:d2:dc:7c:40:bd:c3:26:76:
e9:c5:4d:df:6b:7d:8f:dd:dc:ad:88:cb:4c:64:40:
ce:3e:2c:7e:a1:8b:5d:d8:26:d4:c1:08:ce:fe:56:
d0:b1:78:16:f3:5c:aa:d3:b7:4c:a5:60:3b:f3:3d:
44:5c:b8:db:79:fb:43:d1:5a:8c:d8:64:83:ba:16:
e9:1c:6e:e2:d3:96:85:7f:f8:c1:fb:30:d6:4f:a0:
79:c5:7e:60:c9:0f:af:4a:95:ca:44:bd:d3:d3:d1:
62:73:16:dc:c7:1e:aa:38:4c:99:4f:d7:7a:bd:b4:
9f:73:ab:41:61:8c:6a:46:e8:08:a4:2c:cd:f1:b6:
db:6d:06:7d:18:27:1e:6b:69:7d:d0:b4:71:bb:da:
14:47:85:86:68:17:01:0d:0c:89:c4:81:83:10:be:
c9:52:09:ba:af:52:a7:8b:61:a8:71:ef:e0:49:b5:
17:ac:d2:d7:f0:bd:fa:2b:dd:49:d5:d3:35:6e:2b:
83:11:61:0b:90:67:0c:36:1a:f0:08:cd:64:36:8c:
52:df:15:c6:a2:2e:e3:59:29:32:0a:5d:74:2f:3c:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:B0:BE:22:DF:81:E0:7F:88:F3:2F:3D:F0:DA:09:43:C2:BA:FF
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:75:73:8e:95:4b:c2:e7:11:36:0e:ca:9d:99:85:e2:c2:00:
82:a6:63:a2:ab:3c:8a:04:a7:86:18:4e:17:a9:40:d4:96:05:
76:50:f7:15:c3:30:03:5d:2f:d7:6b:08:24:69:2d:2a:db:a8:
ec:bb:6d:2b:e6:dc:30:28:31:f7:d0:d7:91:ff:fb:49:9d:57:
ce:41:11:11:95:aa:12:36:21:a2:cc:3b:b6:df:5e:17:94:b5:
d3:46:2b:f0:1a:a0:45:63:c8:4d:82:b0:1c:6a:8a:ec:7b:9f:
c0:14:10:ec:e2:8f:9d:c8:cd:e3:1b:dc:a8:da:89:46:a8:aa:
37:cc:a8:31:55:64:9c:f2:f5:c0:ca:20:c3:d1:8d:ef:4b:7a:
31:24:15:90:d0:77:6a:29:1e:b3:13:cd:4a:78:5e:1e:a0:c9:
55:c8:9b:74:7e:fa:e8:7b:41:a3:74:c6:d0:a8:ae:77:bd:44:
f1:c1:9b:9e:9c:c5:22:f5:33:05:c7:e3:96:cf:93:7f:3a:fa:
69:ee:9c:b1:03:04:a1:71:73:56:34:3e:ba:e7:c4:de:4e:c4:
b0:1e:d0:33:ca:96:2d:89:fb:6b:90:26:da:16:0e:56:a8:82:
a9:2f:e1:9c:1f:cd:43:f3:e8:88:e3:6c:66:0c:c1:4a:6a:4f:
fd:85:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:09 2025 by rpki-client