Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: LB7/Jj44hVIT6XtPk76bZlSg/W/a5nyNybv47pI/vZo=
Subject key identifier: 41:87:1A:13:04:C6:D8:80:13:EA:C2:F2:33:32:E4:03:C3:52:7C:16
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0199183FFF71CFC47D0A5F808B3B7063A72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1376
Signing time: Fri 05 Sep 2025 05:01:11 +0000
Manifest this update: Fri 05 Sep 2025 05:01:11 +0000
Manifest next update: Sat 06 Sep 2025 05:01:11 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: FkizdQBDTVOETG553ZSaEU1AosvaGdXiMs3g+NQFALI=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:ff:71:cf:c4:7d:0a:5f:80:8b:3b:70:63:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Sep 5 05:01:11 2025 GMT
Not After : Sep 6 05:01:11 2025 GMT
Subject: CN=41871a1304c6d88013eac2f23332e403c3527c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:17:c1:12:0e:7e:c0:55:49:a8:4c:a4:c8:
07:a9:4a:05:06:ad:74:eb:9c:2c:d4:3e:9d:b0:61:
0d:d8:c5:91:14:98:fe:3b:14:b3:a6:9f:a0:92:99:
1c:6d:52:21:3e:77:b8:32:1b:27:59:38:14:da:d4:
14:e4:83:40:1a:b4:0c:13:18:8c:aa:75:cf:ea:2d:
5c:72:a1:de:fe:b9:3b:2b:80:53:c0:65:80:65:35:
04:42:41:9b:43:a6:ac:4e:f9:83:40:d2:12:be:98:
5c:aa:50:f2:9f:b8:4b:97:40:dd:fb:80:5e:1a:19:
15:e3:9c:1f:a8:33:0c:22:49:3b:c6:a6:06:21:5f:
90:89:7e:04:61:c5:9d:df:94:19:fc:eb:36:01:94:
89:a8:97:6e:87:0d:df:fa:b5:ae:cb:0e:e2:30:06:
92:98:6d:db:c2:37:f3:05:a3:e5:c5:a2:7b:2e:f1:
b7:f1:83:1d:ec:b2:3a:6c:31:54:ae:34:c2:4a:75:
a6:70:7b:0c:23:9f:c9:9a:5e:69:88:6e:83:7d:a5:
86:e5:67:b8:4c:c8:a3:e5:55:b9:b6:37:a3:76:72:
33:bf:7b:1f:44:3c:06:0b:75:70:8f:44:29:65:7f:
02:3f:a5:40:71:ed:8f:a5:96:fe:b7:a4:62:27:7f:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:1A:13:04:C6:D8:80:13:EA:C2:F2:33:32:E4:03:C3:52:7C:16
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:57:8a:fe:b0:7c:83:75:f5:11:44:8f:12:21:7d:58:d0:0d:
ac:77:1a:f9:6e:81:b1:52:73:3f:67:ae:8e:ea:d8:4b:bd:58:
15:4a:08:38:68:18:b1:e2:7c:0f:88:72:03:3d:cd:7f:23:06:
9e:48:90:9e:5e:98:10:2a:0e:e8:95:13:da:c7:08:c4:ac:00:
97:e8:ce:6e:e6:36:93:c3:b3:6e:5b:1b:52:8d:88:99:34:51:
25:6e:3e:0a:df:8d:00:80:71:1e:b1:52:5b:37:2c:6a:50:c8:
80:18:99:53:d2:df:01:8a:f5:6a:18:40:7e:df:22:9c:57:09:
45:1e:3a:37:cc:e1:67:a9:f8:d9:34:03:56:8d:e9:3d:fb:3a:
ac:e4:04:39:f6:f5:a5:15:85:48:cb:95:06:0f:d4:aa:60:96:
d8:52:ab:e6:d6:63:ce:8d:c0:bb:0e:24:7d:1b:94:69:57:bf:
24:f4:2c:bb:2c:02:89:af:51:6e:d7:a4:6a:ce:a4:04:a4:72:
84:82:d0:70:73:c1:fa:7e:b0:11:cc:c3:3b:28:fd:32:6d:b8:
5f:1b:a0:d2:ba:a2:44:c2:59:be:09:f4:30:10:e1:c6:44:48:
cb:7b:6b:85:ec:d3:5d:93:03:fc:ac:c1:d6:36:6a:c1:33:58:
32:6d:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:47 2025 by rpki-client