Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: 5GTqyobpt+EbVJhCEMcwxRTOJ00jwZBGfyNp9IQjxtc=
Subject key identifier: 5C:1A:43:47:17:64:C0:7F:8C:2E:4C:12:49:28:33:3E:97:24:59:01
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 01992367BF201731E0CF93DE3B8E64198851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 57
Signing time: Sun 07 Sep 2025 09:00:25 +0000
Manifest this update: Sun 07 Sep 2025 09:00:25 +0000
Manifest next update: Mon 08 Sep 2025 09:00:25 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: M8AWINNnwOYea0UbcUDjtzos6NSYXfpqSg+99HGIysM=)
2: n-Wmrebr6lzK0J6ASQgmm9zQzw8.roa (hash: gSUCEOpCYsWN0Xnm1rGEL1t6dJaB8XsJukmiSO9QmS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:bf:20:17:31:e0:cf:93:de:3b:8e:64:19:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Sep 7 09:00:25 2025 GMT
Not After : Sep 8 09:00:25 2025 GMT
Subject: CN=5c1a43471764c07f8c2e4c124928333e97245901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:3f:74:27:9f:14:dd:9c:22:b3:ea:2b:41:
33:dc:9f:9a:45:80:12:b0:44:41:f2:1a:a5:9e:1b:
d7:0c:65:09:a5:a5:24:f0:61:a6:c0:6f:e7:91:e4:
b5:91:6a:57:91:f5:bc:55:72:cb:3f:b5:20:dd:16:
3a:81:c0:a6:36:6b:b3:bb:ac:54:54:ab:5f:ea:9e:
cf:58:67:6d:b9:50:6b:ad:43:41:bd:5a:ca:30:4b:
ac:ba:11:4e:92:17:31:91:1c:aa:87:b7:b9:56:2f:
8f:34:b8:d0:b2:a0:ab:75:e2:bb:59:7d:50:32:69:
79:19:f1:bc:a7:46:ef:b1:a3:06:f9:b8:4a:da:71:
36:ab:da:b0:f0:96:f9:1d:66:01:67:62:9c:b5:50:
03:2c:16:70:28:bc:27:7a:4f:0a:4b:1a:48:72:37:
b9:30:bd:54:e4:f2:49:bf:75:39:f7:da:5c:5c:78:
a9:cf:16:86:3f:86:cc:55:ba:ae:7f:57:07:ca:7d:
39:de:5b:d6:3f:f8:bd:be:2e:85:bb:63:a3:17:1a:
5e:6c:78:56:f3:dc:8f:40:45:d3:c5:eb:ce:1f:02:
58:5d:ee:c8:4b:66:86:e3:63:08:a1:ac:23:57:50:
03:97:bf:eb:a9:12:2c:c2:0a:99:64:d5:55:20:2b:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:43:47:17:64:C0:7F:8C:2E:4C:12:49:28:33:3E:97:24:59:01
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:78:20:b2:8a:01:2c:38:29:51:6d:bc:dc:d9:9d:fe:72:88:
50:21:51:df:87:5c:0b:9a:a2:63:34:61:9c:13:9f:22:e8:c6:
af:c5:e8:d3:93:0e:d9:e9:c7:34:96:fe:74:e3:3a:98:3d:dd:
6d:fa:dc:d8:e9:ce:2f:cb:ef:36:03:74:f4:4f:ca:fe:fe:1d:
03:29:63:29:0d:85:0f:5e:86:1b:62:05:fe:06:c9:2d:d3:88:
f3:70:ba:ae:93:d0:77:20:f4:7d:1e:7e:81:b1:d3:85:ba:46:
c1:f5:a9:31:76:ac:57:65:9a:de:80:f8:59:9a:de:04:2f:e1:
be:86:8f:f5:ea:82:84:c2:e6:cc:9b:58:2b:aa:10:b5:95:ba:
10:f8:16:06:24:cd:0e:cb:b1:b9:e4:26:d0:b1:c8:dd:18:54:
f9:84:f0:bd:a6:20:ae:44:59:11:49:20:73:17:b5:7a:3f:00:
4f:55:c5:de:02:87:57:dc:24:eb:17:0f:dd:5d:89:91:66:08:
78:c6:b0:5c:9d:85:f7:67:88:cd:d7:f1:a2:c9:94:ff:39:a7:
da:07:bf:03:14:1d:64:d4:c4:95:60:35:c2:0f:5d:e7:34:39:
7f:d4:20:e9:ac:4e:87:70:4d:b4:af:83:c7:12:f0:67:b3:d9:
3b:c9:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:09 2025 by rpki-client