Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: f3eGVWZIQrXPV/jswG4/cV7xSn9BeJ7iBzYdPpQtPxo=
Subject key identifier: 38:2F:9C:94:27:24:A1:D7:8E:39:F0:60:46:5E:CD:60:F1:15:C7:DA
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0197499F5C490A20CD885BC96EBF3E1BB4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0959
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: W3WW4FlxzX1yWyVSB2D38FseSv0J7ayQ0ljT78uDY+4=)
2: ZHD5dava3w2N4kCoC2nNmHFgkaE.roa (hash: gwDwlr/q6X598Hy0yc+sN6UItT1+TQ/iMV+TYJ9WvQ8=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5c:49:0a:20:cd:88:5b:c9:6e:bf:3e:1b:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=382f9c942724a1d78e39f060465ecd60f115c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:02:76:89:96:d3:1a:b1:f6:f3:04:6e:bb:
ad:4a:f1:dc:8e:8e:4a:89:55:54:69:23:d7:44:21:
f4:58:92:ea:01:70:09:0d:f1:d4:82:ec:35:a5:2c:
f8:ac:33:fb:11:7e:f9:b6:6c:5a:85:b5:d3:4f:63:
57:8d:41:a1:dc:22:9f:bb:cf:e7:59:cb:49:f6:8e:
76:d3:bd:3a:ff:49:c0:86:2d:cd:6d:29:f3:5f:19:
91:c7:38:0f:3d:d6:19:9b:1c:9a:1b:26:9d:f1:a6:
63:34:06:be:12:2d:6f:e3:77:9b:97:be:c3:43:28:
ee:f4:be:f1:b5:85:b5:ae:50:cb:1d:59:62:8d:12:
24:b0:ec:00:63:14:bf:0c:eb:88:80:b0:c8:50:54:
20:28:44:21:0e:cc:ff:97:23:65:35:01:e0:0a:fa:
68:c4:6c:cb:87:94:fd:3f:47:3d:1d:91:d2:26:54:
8e:ab:c8:3f:20:19:89:19:b1:e8:3c:52:de:3e:5a:
55:ca:9b:96:e4:b9:fd:f7:99:1b:79:a0:4f:33:24:
ec:13:50:aa:f3:a0:27:2e:9d:2e:2a:41:5f:5d:a5:
e5:33:be:b4:52:4f:cb:80:c0:2f:e0:67:db:10:00:
4e:b7:86:95:79:fa:70:23:d2:87:05:66:20:e7:63:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2F:9C:94:27:24:A1:D7:8E:39:F0:60:46:5E:CD:60:F1:15:C7:DA
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6d:26:0b:21:4c:af:c2:18:f2:4b:20:b6:ad:89:3a:7c:6a:
b3:83:d6:d9:e1:2d:51:8e:d6:a7:ae:96:3b:2e:88:9e:60:72:
bd:2f:b0:b6:c9:da:59:fe:31:f2:db:52:73:d3:a0:21:34:b4:
76:8d:15:b4:53:61:36:58:9b:52:42:36:97:07:1b:c8:ea:f9:
b4:89:1b:74:5c:5b:32:4f:a1:27:2b:9f:6a:bf:8b:63:c6:95:
a9:50:6f:eb:03:80:2d:d6:01:ca:62:0c:3c:52:12:51:69:c5:
b4:26:90:d8:5f:34:09:76:90:fa:b8:a0:87:5e:12:ea:91:fd:
54:b6:92:d2:9d:10:62:59:2f:14:f6:8f:57:b3:06:d8:ca:ca:
b6:de:50:b1:0f:b7:87:01:4b:3d:e8:f6:4c:25:e0:3e:01:03:
43:7f:32:c4:c5:a3:41:26:57:4d:69:b3:5d:28:e4:b0:da:49:
e2:ff:a4:7c:be:5f:6c:20:14:28:47:4e:05:53:45:89:a0:6f:
fc:50:57:ba:1d:22:5e:64:cf:2a:6c:c7:b2:8e:91:52:18:b9:
ec:24:2d:b0:81:03:07:13:a7:ba:b5:de:50:ca:4e:cd:d7:85:
d3:74:83:30:ea:e2:a0:b9:f8:df:88:79:95:b9:1b:05:11:a2:
bb:d3:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:30 2025 by rpki-client