Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: wiOcsg5/ZkxEYKow+gAeqfVklwla5DQ9TdbCzVxjTms=
Subject key identifier: E3:0A:18:9E:B8:7F:6E:14:86:DB:C2:E1:4F:0F:27:26:FF:21:72:2F
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 0198733DBF128A10B12188B3633CF2852546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 09F6
Signing time: Mon 04 Aug 2025 04:01:23 +0000
Manifest this update: Mon 04 Aug 2025 04:01:23 +0000
Manifest next update: Tue 05 Aug 2025 04:01:23 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: WCXksOEOq4EOb7K/bK/Eut0QDgL0Vl1k+bbBsuK3QgI=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bf:12:8a:10:b1:21:88:b3:63:3c:f2:85:25:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Aug 4 04:01:23 2025 GMT
Not After : Aug 5 04:01:23 2025 GMT
Subject: CN=e30a189eb87f6e1486dbc2e14f0f2726ff21722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:13:84:66:ca:58:6d:59:4c:4d:56:87:72:
03:4f:ea:a2:4e:94:55:99:69:56:98:2a:07:6a:b2:
16:0d:e6:a2:c3:5a:8f:c1:87:a7:dc:91:43:1d:1d:
6f:fc:03:b4:24:ff:56:e5:bd:be:61:49:1a:3f:f5:
65:77:39:30:a5:00:3d:5c:98:da:7a:e0:98:8c:99:
16:0f:20:84:db:9f:c1:4e:7a:c3:a7:a4:17:8d:12:
0d:c4:c3:db:6a:e8:fa:e7:6c:ee:0f:b7:bf:da:37:
09:75:f5:08:4a:b4:be:a9:b3:6b:49:99:be:de:74:
3d:43:f6:8d:47:51:a0:db:cb:d5:b2:6c:74:fa:98:
6e:e6:cf:29:64:51:9f:67:16:0f:5b:0c:9e:95:de:
73:9d:ab:bc:90:be:db:8a:a7:38:48:27:1d:b2:3a:
62:ff:8d:02:dd:83:a3:4d:92:cc:8f:f3:1c:ce:78:
4f:12:76:54:61:7a:b5:76:ff:c7:e5:a8:ad:c2:45:
a4:0f:89:bb:f7:b7:a3:4f:56:d2:c0:8f:00:69:a0:
b9:be:a3:e5:ba:7a:e1:e9:8e:76:77:56:2c:36:a3:
82:b7:59:18:c9:5d:ba:d5:a5:2a:fd:fb:ec:5f:18:
4b:3c:45:8e:27:94:18:c8:ba:b9:ab:54:92:f8:31:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:18:9E:B8:7F:6E:14:86:DB:C2:E1:4F:0F:27:26:FF:21:72:2F
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:19:35:aa:05:3c:b8:70:a2:bb:65:65:67:0c:14:b5:ec:83:
9f:df:06:11:30:62:5e:64:77:73:43:8c:af:93:97:08:0b:ee:
be:ef:d6:75:c5:69:d1:6b:e8:50:18:60:2c:4b:ad:e9:41:b3:
18:85:df:06:82:7d:3e:d9:c9:9b:1d:b5:6e:8c:ef:07:2c:7f:
4a:6f:77:ce:d0:99:e2:5b:ee:13:59:ae:ef:c8:1d:90:d3:4d:
5e:8d:aa:af:e9:e5:52:7c:ea:f2:75:23:bf:44:4c:1c:03:57:
0e:ca:ce:27:f6:23:d1:ee:7e:7b:63:1f:f6:fe:fb:24:b4:7d:
95:c5:45:dc:b5:f1:d7:1a:95:04:d1:11:df:e5:27:40:a2:8b:
7e:ba:63:fb:f5:a7:b6:19:58:d3:f9:e6:bc:98:88:2b:53:83:
96:5b:ac:24:32:89:c1:81:57:5c:57:2b:fc:c7:f6:e6:5c:05:
f6:d6:8d:c9:5c:32:8c:60:10:a6:77:ce:af:58:93:5a:0c:d4:
3e:41:8a:7d:19:6f:79:ef:1b:ac:9b:29:4c:fd:9a:3f:dd:b2:
19:fc:21:1f:e1:45:60:c7:b6:71:b3:12:a5:87:67:f9:0b:4e:
f5:1f:ad:70:7b:ae:b6:77:4b:cf:c1:a4:63:00:89:07:c7:d6:
c1:8a:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:21 2025 by rpki-client