Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: oSJm4M/Kz1Mcpdtg2YK5+Yh4AndsG+9wGrYzOQ6W6Lk=
Subject key identifier: D8:F2:45:B5:90:57:7F:56:0F:CB:62:5C:24:1D:0E:FF:ED:8B:C4:19
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019A262F128F181FD3688C222F752302240D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: DD
Signing time: Mon 27 Oct 2025 15:00:10 +0000
Manifest this update: Mon 27 Oct 2025 15:00:10 +0000
Manifest next update: Tue 28 Oct 2025 15:00:10 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: 7nvmA8lhAAevx1R2ieBaluDzVxM+URhGufXt5aNVqg8=)
2: n-Wmrebr6lzK0J6ASQgmm9zQzw8.roa (hash: gSUCEOpCYsWN0Xnm1rGEL1t6dJaB8XsJukmiSO9QmS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:2f:12:8f:18:1f:d3:68:8c:22:2f:75:23:02:24:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Oct 27 15:00:10 2025 GMT
Not After : Oct 28 15:00:10 2025 GMT
Subject: CN=d8f245b590577f560fcb625c241d0effed8bc419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:31:81:ad:1a:8c:8e:c9:91:e3:44:ae:6b:
4a:90:d3:2c:88:79:c1:d2:65:f1:12:c3:57:a7:b2:
b7:23:28:20:14:de:e0:ec:96:a3:45:2c:ca:f3:53:
5a:19:df:38:e6:9f:ca:05:02:38:77:bf:03:b3:1e:
95:f7:06:98:70:ad:77:65:bc:90:d3:c4:30:f1:61:
f1:85:f7:2d:fb:d7:9b:4b:86:26:f0:0e:5f:d1:1d:
1b:f3:c0:fe:a7:a5:1a:c2:35:71:e3:22:2f:e7:df:
3b:e5:48:04:94:fa:12:6a:5d:11:66:92:5b:05:ff:
d0:15:16:a0:39:e3:50:4c:46:9f:df:d1:9f:02:94:
2c:a2:06:36:d1:30:29:c8:15:f9:d0:36:1a:3c:c3:
46:51:9b:17:af:12:75:a9:54:ad:31:3b:d2:61:35:
a3:46:25:62:b2:a4:30:51:0c:88:a0:e2:39:99:fb:
8c:da:95:1e:df:2a:f8:31:dc:3c:18:ef:fb:cb:82:
4e:37:c3:e6:b8:fa:61:46:0f:48:87:fc:fb:fb:95:
ed:63:27:e6:d1:f6:45:da:3f:62:1b:c8:05:90:76:
ca:aa:02:51:f6:25:97:a5:24:b2:e2:48:9f:92:1d:
59:95:13:72:2d:d9:81:f1:f9:62:44:18:13:24:01:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:45:B5:90:57:7F:56:0F:CB:62:5C:24:1D:0E:FF:ED:8B:C4:19
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2b:21:8a:4e:c6:71:38:c5:09:eb:b4:9f:25:cb:2b:78:0a:
83:84:e6:f4:bc:e7:51:f2:14:00:1d:de:e9:93:16:51:23:85:
8e:84:74:11:a4:8b:01:1f:07:01:82:7a:f0:4f:16:79:87:41:
d2:de:95:7c:f9:1a:20:62:54:fc:da:c4:a1:0f:eb:a1:6e:e4:
48:b9:35:fd:6a:16:87:18:a6:c9:50:42:0f:30:16:70:e1:05:
06:89:ce:8a:41:e7:5e:b2:9c:4f:37:7c:51:5c:6b:09:5e:b4:
80:df:a1:e6:52:e6:e4:e4:5f:13:12:bd:76:60:15:d4:68:2e:
1c:66:fd:84:42:05:fc:7a:4a:b2:6c:5e:f0:a8:cb:25:59:15:
a0:fd:e1:ab:da:a4:d6:ce:ec:be:47:2f:8a:43:e5:61:a3:65:
ac:39:0f:33:a9:5f:d5:4d:9e:3d:7c:d0:15:e0:fc:85:ed:9d:
6f:f8:74:58:a4:d6:f6:f8:3a:18:87:e3:cb:ca:ca:61:8c:cd:
88:96:8e:26:d6:e2:7d:c2:cb:21:f2:39:96:22:20:3e:b2:09:
0b:ef:57:c1:ef:70:37:f5:bd:63:7a:81:ce:e2:bc:e3:8e:98:
cc:49:14:77:04:2b:c8:5b:53:0a:ad:56:c5:88:47:9f:3c:cb:
69:61:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:41:47 2025 by rpki-client