Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: cR7+5xvpvkMC18QuocjI+N0wEKTExEhAWqo2JWGciVE=
Subject key identifier: 00:35:07:DE:DE:9F:3D:B1:95:BC:8F:7F:43:CA:E2:0E:FC:9C:F5:B2
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019872CF318C1643DCA9709E93EF172544F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0964
Signing time: Mon 04 Aug 2025 02:00:37 +0000
Manifest this update: Mon 04 Aug 2025 02:00:37 +0000
Manifest next update: Tue 05 Aug 2025 02:00:37 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: VTVk9b7uwDuYC++39BkchSVIKi5zFMPG4Rp0ILfFTBA=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:31:8c:16:43:dc:a9:70:9e:93:ef:17:25:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Aug 4 02:00:37 2025 GMT
Not After : Aug 5 02:00:37 2025 GMT
Subject: CN=003507dede9f3db195bc8f7f43cae20efc9cf5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:80:4d:a4:d0:bd:80:82:7b:0e:3d:17:34:
ac:b3:fa:cb:b8:29:1d:36:1b:17:a7:5b:0f:1a:11:
da:64:e1:e0:1f:73:09:1a:b7:8a:23:53:4c:da:bf:
36:cf:d6:05:10:a0:d6:e9:ce:3e:07:ea:7d:66:ec:
63:6d:85:a2:00:34:be:ae:f5:dd:3e:6e:6f:b6:25:
34:36:b5:51:ce:a8:b7:1b:8b:fe:b5:75:1e:47:61:
26:0a:99:7a:87:16:5f:10:19:55:ed:56:53:06:e6:
bb:e5:db:22:e5:22:8f:c8:7e:b9:2c:36:c4:aa:f0:
38:cd:eb:dc:d1:b8:71:2b:29:19:fc:d8:f9:25:0d:
36:90:f6:26:e5:8d:0e:7f:12:da:af:a1:6a:26:0d:
77:d6:a6:ec:36:e1:c1:97:e8:12:f3:86:61:a4:6a:
2b:4a:fa:86:a7:ac:29:eb:62:7e:31:fa:85:e8:86:
4e:1a:c9:62:36:b0:eb:e2:f6:ac:1e:bc:38:83:ea:
45:de:18:b1:17:99:95:97:80:03:06:2b:7a:3e:2e:
cf:94:ea:45:51:fc:4d:96:95:10:8e:80:c7:d8:78:
33:73:8c:34:97:0d:81:bb:15:19:7f:be:34:17:1b:
f6:67:1f:f4:a8:26:08:34:22:45:3f:36:f3:90:72:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:07:DE:DE:9F:3D:B1:95:BC:8F:7F:43:CA:E2:0E:FC:9C:F5:B2
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9c:4d:03:ae:6b:63:1e:a5:ff:d6:45:12:60:67:a0:9a:22:
1e:e7:93:f0:eb:24:26:3e:70:8e:af:e6:28:07:34:19:e9:d7:
f6:bb:46:eb:52:2e:c0:19:bc:99:e9:f5:85:f4:bb:4d:72:de:
0f:65:1f:b7:4f:b8:32:d1:41:52:ee:72:0e:4a:09:02:cd:2d:
26:9b:e4:c3:b1:3e:f8:15:6b:0e:20:9e:48:60:c7:a5:cb:10:
1f:37:14:5a:4c:d5:c9:30:23:81:e2:ba:19:cc:e9:14:aa:dc:
7b:66:b5:a5:7b:f3:20:57:1a:ad:b6:34:2a:7d:15:cd:1c:71:
83:70:52:5e:02:ce:a7:03:d6:6b:4d:c0:6a:61:21:02:7e:3f:
8c:1f:95:45:22:7a:00:11:6b:0d:9e:0d:94:67:c0:82:46:a5:
af:f9:93:1f:ae:82:36:f1:e7:d8:c1:b7:96:ec:9e:76:e6:0b:
a0:b7:6c:42:94:bf:12:e5:66:f6:c7:0f:cb:36:33:bf:ed:d1:
82:e6:31:65:1e:4d:26:5e:5e:4d:5d:1d:f0:21:46:7f:d2:43:
9f:f4:cf:00:89:ef:9e:a2:89:83:c0:53:95:97:b2:43:73:73:
cb:e8:4f:ba:11:04:23:d4:9e:c3:87:51:69:90:ff:89:6b:9f:
a8:4c:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:04 2025 by rpki-client