Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: +i7qd+oGBQvM6fvQsccLE4WbJl9t1dgDyGNxJzBzirc=
Subject key identifier: 67:10:13:D6:E7:89:FE:F1:51:63:EE:80:0E:3F:C2:EB:72:0D:3B:FD
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019873746586D78C118D0633F06137D5A48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0D3F
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: lr5gNJOhr5xSC4gnaWR+awIoTBa3Olkt0a1Y7dAdpTk=)
4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:65:86:d7:8c:11:8d:06:33:f0:61:37:d5:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=671013d6e789fef15163ee800e3fc2eb720d3bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:49:47:09:68:6e:c5:e3:f7:78:24:7f:06:
88:5c:02:69:98:97:79:78:5d:f1:1f:8c:70:c9:ad:
7a:8a:2f:36:8b:79:89:c2:e6:ea:4e:28:f1:6c:10:
82:b5:b3:2f:f1:3d:97:a0:2c:65:b1:0d:7c:75:1a:
56:3f:28:58:ec:ff:b4:71:73:a2:12:a8:23:d0:97:
3a:eb:1a:01:b7:00:8c:d9:e0:ec:3b:70:81:46:31:
2c:01:9b:ef:17:ed:ea:d9:7a:19:7f:49:98:9e:8f:
1d:10:75:53:99:fa:de:d0:8c:fc:5c:f0:e7:02:32:
e9:81:39:ed:cf:d3:80:72:72:57:5a:63:7d:26:3f:
81:45:01:f2:01:5e:9f:46:61:b7:a8:07:ee:5b:98:
54:19:9c:29:de:65:79:e5:fd:b5:c2:2d:7d:eb:64:
68:e6:94:ab:79:60:34:6b:dd:b2:24:a3:78:df:ce:
f1:72:52:d2:ba:e8:60:c3:f0:e4:81:4b:f0:4e:06:
99:6c:e8:7f:b4:69:13:c8:20:92:b5:fd:c1:74:25:
c4:1a:01:3b:19:53:62:97:fc:82:d3:f2:83:5d:93:
ea:60:c5:7b:58:48:87:1f:33:6b:16:e4:fc:ad:f4:
d2:56:10:d1:74:f7:a2:c9:a4:70:54:57:ef:20:30:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:13:D6:E7:89:FE:F1:51:63:EE:80:0E:3F:C2:EB:72:0D:3B:FD
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:2a:ee:d2:7d:40:7a:b9:d8:69:2c:6a:67:b8:01:62:62:
3a:18:36:8b:1c:88:a4:52:b1:80:7b:58:5d:bd:41:a2:23:e1:
f5:52:6b:af:9a:73:4d:c0:2d:9a:08:de:ad:7a:55:59:20:1a:
61:3f:74:8c:bd:44:20:cc:a9:d7:4b:9b:af:b6:39:77:d3:77:
fd:e3:0a:ab:54:26:77:6c:ba:b8:a7:d4:34:16:b9:9a:48:8b:
2f:5d:5e:81:75:fd:70:e7:5b:55:32:3f:d2:0c:22:0f:33:e1:
13:fb:20:f8:7f:1c:ce:92:40:60:2f:f3:bd:a9:b8:93:09:da:
fc:33:b9:44:9f:6a:7d:d3:2e:cc:09:a3:40:e4:a9:af:29:ec:
11:dd:dc:7e:e6:05:79:87:3e:7b:e3:78:65:cf:5f:10:cf:32:
6b:f3:a5:7d:e8:0e:66:0a:7e:30:83:7b:8a:1c:6b:5f:96:80:
2c:fe:f8:7b:39:b1:18:c6:56:7c:a3:15:70:d4:e1:6c:29:b9:
3f:02:51:d1:0b:0a:93:63:ed:c9:d3:e6:ba:7a:f1:d6:7a:c1:
bf:b2:b4:12:dc:16:cb:06:33:05:b4:9d:c6:58:7f:f3:cc:c0:
81:70:2c:86:0f:fc:26:44:0a:fe:6a:0d:99:3f:ae:5f:08:25:
24:db:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:45 2025 by rpki-client