Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
File: KaA5l7KPWbCAMciYQH3V5RN93bE.mft (raw, json)
Hash identifier: SqV9Q7hRjQbE71nqPdF6lH4TkXWmeDJX22dm4LpUt3c=
Subject key identifier: 28:4D:41:60:3A:93:E1:20:F9:13:89:F0:C8:3D:23:4B:34:F3:35:9C
Authority key identifier: 29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
Certificate issuer: /CN=29a03997b28f59b08031c898407dd5e5137dddb1
Certificate serial: 019872CF65E1D4D1FCE84B6AFAEAEC0932B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
Manifest number: 1302
Signing time: Mon 04 Aug 2025 02:00:51 +0000
Manifest this update: Mon 04 Aug 2025 02:00:51 +0000
Manifest next update: Tue 05 Aug 2025 02:00:51 +0000
Files and hashes: 1: KaA5l7KPWbCAMciYQH3V5RN93bE.crl (hash: 4MbhFgCxCRjsVbQE5AdLFU/bgbSGjCEtdw8TUNKznA4=)
2: TFGcxJc1hz5sSLNvCaBuhb3JcFY.roa (hash: IVGRn6jYdKaVvVkrmcrSKzMRsOoEhE2vOI0riR6WQTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:65:e1:d4:d1:fc:e8:4b:6a:fa:ea:ec:09:32:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a03997b28f59b08031c898407dd5e5137dddb1
Validity
Not Before: Aug 4 02:00:51 2025 GMT
Not After : Aug 5 02:00:51 2025 GMT
Subject: CN=284d41603a93e120f91389f0c83d234b34f3359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:2f:2b:8f:77:1b:9b:f7:eb:72:21:55:d5:
af:f2:5d:4c:3a:ff:61:dd:18:99:aa:f3:0a:aa:1b:
7a:14:73:d3:7a:65:7b:25:32:da:59:2e:05:1d:19:
f7:27:0f:49:58:87:4d:c7:ba:f1:a1:4e:79:46:ae:
9b:b5:ec:6e:7d:ed:88:96:95:75:04:49:e9:2b:4a:
b1:5f:0a:fc:bf:93:c8:11:67:0f:67:b3:9a:22:1b:
e7:52:cb:24:67:aa:5e:5f:87:53:69:e7:c3:84:e0:
c2:a8:12:96:fc:10:5a:2b:1e:0d:a2:9f:91:88:93:
2c:fe:22:3b:09:fc:9e:c1:51:75:c9:c4:3e:87:28:
76:5a:45:70:04:95:0e:a8:0a:c4:cb:e6:18:56:4c:
c0:b8:c3:33:10:83:83:29:0f:74:7d:53:3a:10:7a:
a3:64:3a:26:85:73:6c:3c:c7:bd:ba:37:54:8f:5c:
dc:e0:c3:65:37:be:73:3c:32:8e:9e:7a:f3:3a:a6:
15:cc:73:05:b4:73:ba:32:de:5d:4b:5f:70:0d:a3:
b4:8d:01:33:bb:ac:e6:42:ee:1b:3a:ba:d9:da:5b:
df:12:5f:91:bf:34:c9:6a:c3:6f:0a:1a:b6:ab:0e:
9d:29:8e:ec:99:61:ec:06:e4:b2:e5:b0:3e:5e:40:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:41:60:3A:93:E1:20:F9:13:89:F0:C8:3D:23:4B:34:F3:35:9C
X509v3 Authority Key Identifier:
keyid:29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7c:03:01:43:c8:07:dd:4f:50:2f:8f:25:83:7e:ea:95:36:
20:09:7f:da:a8:72:76:a3:2a:b1:2f:c9:23:bf:b1:4e:3d:7c:
68:d0:16:85:2b:99:98:13:ed:e9:48:7f:c6:bb:b8:2c:ff:95:
dc:25:a4:0f:90:ec:ae:ba:85:42:17:ee:f5:b4:09:56:29:c2:
97:e5:5b:20:c0:f2:6e:d8:b3:28:28:93:63:d3:42:be:2f:93:
67:06:f0:78:4e:7a:3a:f0:2b:2f:7e:bb:02:71:7e:86:8a:75:
d8:4d:1e:a0:d6:62:ab:5b:6b:e8:d0:6a:76:31:de:8b:ad:92:
69:94:81:27:33:5e:f6:df:23:2e:cd:8d:f5:3a:e3:3b:85:81:
18:fb:e0:b7:30:ab:36:8a:17:e1:b7:f0:b3:1a:f7:46:0b:9a:
7f:04:d5:37:31:c2:8c:29:89:f4:54:36:da:fc:dd:97:c2:4e:
89:e1:34:9d:a6:b3:75:36:4c:85:32:8b:d6:07:51:73:7f:1f:
92:69:e2:57:b2:61:27:f6:96:85:6a:55:06:9b:6b:64:bc:a2:
4b:1b:ec:f0:ff:8d:d7:39:be:aa:44:70:f2:aa:94:32:78:56:
fa:db:9d:c6:6f:fa:9f:03:ce:02:72:23:a5:f0:33:1f:73:59:
be:3d:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:20 2025 by rpki-client