Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: kMxD7uJls+aj+GLb+hptEYMNzIvRJPLk1S4XQTI3ODc=
Subject key identifier: B7:03:1A:23:91:71:FD:8E:E6:83:C5:2B:81:60:DB:0F:E2:4E:8C:72
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0199338028712C0B6A386A6775BDC63D79BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1458
Signing time: Wed 10 Sep 2025 12:01:00 +0000
Manifest this update: Wed 10 Sep 2025 12:01:00 +0000
Manifest next update: Thu 11 Sep 2025 12:01:00 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: z3CC+ybRRfyhFKF0WU7f+ooyFYV9AvQlj8z/UPlpBy0=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:28:71:2c:0b:6a:38:6a:67:75:bd:c6:3d:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 10 12:01:00 2025 GMT
Not After : Sep 11 12:01:00 2025 GMT
Subject: CN=b7031a239171fd8ee683c52b8160db0fe24e8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:4e:4a:c2:26:d8:13:fc:b3:ba:76:23:a5:
8e:f5:57:53:43:2e:df:ee:bb:a7:b8:a3:9a:f0:93:
bb:57:69:09:76:3e:eb:69:ba:09:77:79:74:d3:65:
61:d5:8e:83:15:fa:c0:f3:2d:1a:41:ce:50:fa:d3:
40:bb:cc:4a:42:a7:35:a6:bf:2d:ba:b5:d6:7a:55:
65:f1:6c:cf:72:5b:81:0c:29:18:bb:66:9f:62:f5:
0d:8b:23:27:02:f3:27:bd:49:b9:41:50:7d:10:f2:
15:ed:8d:08:0a:01:7c:8a:42:8e:3d:72:62:18:4a:
d1:a2:f9:d2:72:2d:76:4b:7b:2a:76:79:95:97:a6:
54:60:ce:f5:87:7d:55:db:1b:09:92:50:dc:68:0e:
b2:e6:88:e1:30:e5:f2:a2:a5:38:bb:b5:e7:23:b5:
3a:23:91:88:18:0b:e2:a3:4e:36:f2:e6:c5:aa:1e:
84:1e:1a:83:c9:0e:a4:c5:1f:69:ef:de:0d:29:00:
c4:be:62:dd:f6:c8:48:7d:41:76:ad:43:cb:54:b4:
d1:3d:8e:a0:fa:0e:56:a2:1f:2b:c0:17:5a:07:2f:
29:23:7c:9c:58:79:dc:d2:15:05:46:76:77:1b:8b:
40:64:2c:2b:27:22:a0:7f:68:95:8e:df:64:5e:38:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:1A:23:91:71:FD:8E:E6:83:C5:2B:81:60:DB:0F:E2:4E:8C:72
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:5a:b6:48:4e:48:75:d7:16:64:d2:37:e8:77:d8:f0:af:
e5:21:9f:39:31:ae:3f:53:cf:25:2c:b7:76:94:f4:fa:63:ee:
8a:ac:84:e1:75:c3:c3:2e:4b:16:84:4f:d2:f4:5b:93:3b:50:
c0:17:e4:3f:0f:f8:c9:8f:4f:87:85:55:7d:56:de:53:f3:60:
20:69:26:f9:86:e1:61:d8:39:15:cc:56:91:d3:93:6e:dc:7c:
5e:f6:ee:9b:6b:b8:a6:b5:39:58:34:13:23:f7:fd:c0:cb:1b:
2a:63:ef:cf:9b:27:28:4b:3a:c6:61:b3:9a:26:e9:21:f8:cf:
02:53:0a:f6:c8:70:6a:58:fe:83:a6:72:e3:de:de:ed:56:1d:
34:60:57:00:b2:a3:49:8b:df:97:67:3f:a2:b3:24:b1:a5:ca:
a3:ec:6e:62:8e:f9:4a:ab:92:cf:e4:95:24:c2:eb:93:64:c4:
6e:0d:33:af:3f:49:4e:59:72:d3:8d:9d:21:33:27:20:fa:c4:
62:9a:d4:05:da:4f:83:1b:93:81:01:85:4b:d5:b8:39:97:b4:
73:7a:9b:ca:54:f3:46:05:fe:27:3a:26:0a:d5:cb:48:5c:21:
8e:b1:1f:e2:9b:eb:9c:cc:2e:18:98:70:cc:0e:8b:1a:a4:74:
dd:a8:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:15:54 2025 by rpki-client