Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: WhyuBA4jqLLBWLWUbRacyNxNg18PXRVyK8V20sHC5fY=
Subject key identifier: 49:43:09:07:56:5E:53:C8:56:93:3B:DB:7A:54:E6:F6:95:6E:BE:EB
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 01988F226DA17CA2BF3B96A86A44B9DE249F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 14:00:54 +0000
Manifest this update: Sat 09 Aug 2025 14:00:54 +0000
Manifest next update: Sun 10 Aug 2025 14:00:54 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: BTG8T/BtYJPFnwVMnTh8gCVEc99/m017sT7goJaynWE=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:6d:a1:7c:a2:bf:3b:96:a8:6a:44:b9:de:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Aug 9 14:00:54 2025 GMT
Not After : Aug 10 14:00:54 2025 GMT
Subject: CN=49430907565e53c856933bdb7a54e6f6956ebeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:4b:d6:17:96:37:d3:25:74:e1:f9:61:8f:
d1:d8:72:eb:98:a9:5a:b6:32:aa:e2:45:de:b3:cf:
55:a3:36:90:8e:96:ff:9d:7c:9a:1d:d8:aa:bb:03:
9a:51:15:ed:52:63:82:e2:5f:a2:be:a2:0e:d9:72:
1c:4d:7f:85:da:18:44:05:3d:73:bc:42:00:c0:ce:
4a:7c:d2:e8:d3:25:88:cd:bb:33:6b:07:c3:aa:40:
da:38:a7:53:ae:1f:e1:f4:e2:9f:88:fa:fb:49:1c:
26:f4:ae:e5:b0:92:b7:2a:d6:05:43:88:23:7c:f2:
17:d9:92:72:86:9b:4e:00:63:62:5b:cf:0d:87:13:
33:eb:01:5e:f9:87:07:86:3a:18:15:ba:3c:da:6f:
7e:76:3c:25:5f:9d:7a:28:81:d6:9d:7d:fb:73:4b:
a1:95:eb:0e:aa:dd:ae:88:b3:04:3b:9a:29:dd:be:
65:5d:39:c9:9e:ea:f2:b8:6f:1e:bd:23:f6:aa:df:
29:df:9e:e5:1d:60:e0:b8:a9:3a:fd:fd:53:c1:d1:
a7:aa:c1:88:76:af:24:04:38:04:49:b3:62:2b:f6:
20:e1:1b:61:24:ba:7c:73:0d:a5:1a:a2:f3:2a:d1:
a4:7b:b7:00:5c:1c:2e:47:26:0b:69:cf:aa:bf:8e:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:09:07:56:5E:53:C8:56:93:3B:DB:7A:54:E6:F6:95:6E:BE:EB
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:78:c4:19:97:80:5e:92:f5:0d:97:68:90:77:81:db:c1:
cc:37:8d:e9:e1:ad:69:05:9a:aa:cc:7d:52:31:b5:ef:03:be:
d2:28:76:27:8c:36:bd:a8:95:df:ee:d6:e0:c5:84:f0:9f:37:
bf:5a:9d:eb:9e:cc:cc:cc:48:df:9c:30:70:4b:19:6e:fc:9e:
31:88:63:c6:d7:28:0b:9d:27:ed:0b:a5:77:c2:ec:b9:ee:9a:
21:53:0b:95:5a:8e:ea:87:00:ce:3b:32:b4:b5:f6:a1:99:ac:
3d:73:47:a9:47:0d:e3:c5:25:1a:e8:51:10:54:f9:d2:11:89:
45:0c:f0:f1:4f:ec:b6:aa:2b:9f:55:93:b5:a6:4c:5e:a1:2c:
5a:d7:c1:7b:38:f6:c4:82:36:7e:51:0a:85:e4:fe:4a:1b:78:
93:0d:40:7b:45:a6:da:f6:52:fa:28:df:2a:1a:e3:23:98:10:
2e:2e:88:f5:38:eb:be:2c:e4:ce:c6:42:bc:d4:66:89:69:36:
07:69:42:b8:73:b1:56:d9:9d:38:a9:9d:0d:51:df:ba:d9:0d:
4c:7e:37:74:dc:0d:2f:da:8b:c5:db:37:c9:1f:8d:bf:98:40:
be:af:38:22:f1:d6:7f:eb:38:6d:8c:ae:db:05:39:fe:40:c7:
de:4e:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:08 2025 by rpki-client