Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: 2bi3vl/90Lo2E1qtJ/qzdolfbUafjwyRF2UphwhodAA=
Subject key identifier: CC:90:DF:7C:0C:62:BB:A9:C0:42:67:6C:85:2B:19:D9:E4:74:80:83
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0199240CA9FE6704F7756614B28A2FFDC145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 02DF
Signing time: Sun 07 Sep 2025 12:00:33 +0000
Manifest this update: Sun 07 Sep 2025 12:00:33 +0000
Manifest next update: Mon 08 Sep 2025 12:00:33 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: O6TfA0WOotf7Hr2eUFdFGimeyVZ/scPUWf4c1Nnu5TY=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:a9:fe:67:04:f7:75:66:14:b2:8a:2f:fd:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Sep 7 12:00:33 2025 GMT
Not After : Sep 8 12:00:33 2025 GMT
Subject: CN=cc90df7c0c62bba9c042676c852b19d9e4748083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:47:b3:f6:25:15:17:a6:ae:e2:4a:62:1a:
ce:23:27:80:9d:e3:a8:cd:3d:64:eb:c9:0c:00:9e:
fe:44:7a:7d:c8:3b:f8:31:88:d8:00:e7:f5:8e:47:
f2:a7:5f:26:e8:ac:6d:a6:5a:ae:2e:2e:c7:42:b4:
f8:65:25:98:60:fe:79:80:08:ba:a7:d8:e0:57:ac:
eb:93:1c:78:e2:46:80:89:2b:a7:32:59:00:43:b0:
31:f2:2a:a6:fd:c7:d3:67:34:52:c7:76:d5:d6:df:
aa:da:22:e0:eb:67:f1:5c:08:6c:b3:dd:ca:9e:ed:
42:d5:5b:8a:d7:b0:e7:60:e7:0d:f8:3e:83:56:ce:
c8:2a:9f:54:8f:36:ff:cd:63:e9:09:a2:8c:fe:69:
fd:95:cd:82:52:ca:e7:1c:e6:ec:7a:d5:eb:d0:0a:
f7:95:2c:1e:aa:fc:b4:05:5c:e4:95:ad:a4:5b:85:
c6:4d:43:0f:05:d8:1a:ea:7b:26:7f:9c:06:9a:be:
d3:3d:73:e3:34:35:d9:58:dd:db:1d:c5:02:7d:c2:
ff:0f:98:f4:cd:a5:22:e1:d6:24:22:00:23:ae:7d:
73:49:be:7a:3e:c0:51:c8:32:a6:23:dd:d4:c4:f7:
03:6e:43:90:3c:ce:28:7b:fd:98:72:29:84:51:d3:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:DF:7C:0C:62:BB:A9:C0:42:67:6C:85:2B:19:D9:E4:74:80:83
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7e:59:5c:7c:18:53:61:09:5a:6b:83:e8:bf:a6:18:44:16:
ba:6f:64:5b:b8:e4:75:47:80:5d:cf:47:ab:96:8a:66:18:66:
d1:3a:59:ea:7f:13:ed:2f:56:14:89:51:b3:71:94:bf:65:64:
25:86:c8:e6:5a:57:61:50:48:1a:0a:16:9a:3f:e0:48:12:a2:
63:d6:02:43:73:c9:92:90:a0:86:5f:a1:00:bb:e1:85:8c:49:
90:3e:39:cf:8e:6d:ed:cd:ab:46:ab:b5:b9:0c:17:f7:61:e8:
f2:7b:b1:36:80:db:3f:93:c7:c8:a9:7a:aa:0a:7d:9d:20:65:
0b:d2:9d:b6:02:61:f5:cf:d7:60:2b:c0:86:a0:e4:e6:d7:94:
e7:dc:05:fd:2c:c0:12:f2:48:52:51:87:13:9d:b3:08:38:4e:
f7:6f:82:59:cd:b3:45:27:4b:5e:7a:4b:01:ab:28:c5:c3:b4:
cb:39:d3:a2:1b:43:83:7f:a4:5c:92:a1:8b:20:e3:1b:44:61:
8a:ae:b8:77:d7:46:71:f6:71:f7:45:2b:a2:2d:47:67:56:05:
98:21:38:60:26:c3:db:61:c7:8b:0e:5c:f8:35:ae:55:3e:dc:
2c:a5:6c:11:c3:07:3c:55:a4:f4:7a:48:53:b2:9d:70:b0:08:
85:e6:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:47 2025 by rpki-client