Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: WXniv6NnoW0QdCbZduJYOO758gFMZvHHKC7e5CQBL9o=
Subject key identifier: 2B:03:EA:CA:DB:EE:54:82:02:13:85:02:57:65:0D:3D:07:5E:58:4B
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0198873225127295615844E45923CCFF24B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0DAC
Signing time: Fri 08 Aug 2025 01:01:07 +0000
Manifest this update: Fri 08 Aug 2025 01:01:07 +0000
Manifest next update: Sat 09 Aug 2025 01:01:07 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: /bAqjDFOQ8AVK7F/J/so6JIKIXG5zyfl054KDZJsAV0=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:25:12:72:95:61:58:44:e4:59:23:cc:ff:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Aug 8 01:01:07 2025 GMT
Not After : Aug 9 01:01:07 2025 GMT
Subject: CN=2b03eacadbee54820213850257650d3d075e584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:bf:87:b3:4d:74:a9:0b:6d:4b:99:96:49:
6a:81:e6:11:f1:d2:bc:83:78:95:1b:d8:c7:3e:cc:
0d:49:24:18:84:ad:dd:7b:3b:49:9e:f2:7a:09:99:
75:b1:23:db:ed:15:4e:71:70:92:21:48:4d:6d:3c:
59:48:d1:34:c9:bb:44:86:50:4e:da:ea:4d:44:ba:
df:ef:11:8d:93:32:cb:36:c4:4f:e0:cf:8e:78:4c:
b6:cc:46:28:fe:0f:53:64:54:fc:09:50:8b:25:98:
ec:f6:4a:76:90:10:6b:43:ae:7b:71:6e:13:7b:11:
c9:63:8c:4f:d9:cb:4b:66:87:a5:3d:62:e1:51:b3:
74:9c:98:23:db:1c:2b:81:a2:4a:48:34:e5:68:ce:
7a:85:46:ba:5c:cf:57:3f:6d:93:4a:de:b0:a6:1e:
1e:2d:a3:07:ff:3c:92:f3:34:4b:ff:6b:12:1f:bb:
ac:a8:b5:d0:9f:60:0b:f5:52:58:8b:22:a8:7a:cc:
35:cd:fa:bb:7f:94:7b:db:d0:69:2c:30:93:3d:cc:
7e:1f:43:6e:a4:34:4a:14:6e:b3:8a:e3:52:e7:3b:
37:04:aa:7d:3a:69:89:2f:46:7a:14:1e:1d:6f:db:
0b:02:ef:86:bf:bd:87:3c:41:f8:b9:1c:43:da:ca:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:EA:CA:DB:EE:54:82:02:13:85:02:57:65:0D:3D:07:5E:58:4B
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:72:5a:8b:7b:b5:70:c7:47:b3:bd:93:2a:82:95:8f:22:b4:
49:6e:85:62:69:f3:fc:2f:fa:3d:6e:7a:a7:dd:f7:dc:17:2a:
e6:b9:c1:9b:9e:dd:52:01:a3:a6:fc:72:76:62:61:9e:a9:71:
14:27:d6:e6:2b:3d:75:e4:ce:5c:cb:4b:a5:2c:99:65:45:80:
f6:33:44:19:87:ae:55:58:5b:cd:fa:03:91:d4:7a:5e:ad:4f:
5c:98:5b:83:f7:d4:5e:05:df:30:e1:ee:18:74:e0:bf:f4:d0:
e1:6e:76:fa:50:27:fe:8d:aa:e7:cc:e4:9c:31:eb:78:be:1c:
17:e3:27:e0:a6:f6:a0:ab:98:8d:36:6f:e5:0a:7b:38:0c:92:
fc:e8:08:6d:93:ba:aa:a9:b1:3a:f8:cd:dd:ca:f2:35:62:c6:
67:f3:a4:4b:08:00:e9:df:88:60:ee:a4:78:d4:20:af:84:1d:
09:2a:ff:9f:21:79:a6:05:f7:9b:35:90:a3:81:b3:dc:e5:fe:
15:28:ed:54:4d:e9:0f:c1:88:7e:c5:6a:01:b5:e0:03:0c:ef:
7d:b4:f0:46:d5:3a:5c:ec:48:9a:64:cb:28:62:82:5c:19:54:
46:fe:23:38:3d:0c:9f:ce:4e:38:4c:08:53:20:5c:01:10:20:
7e:e8:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:11:07 2025 by rpki-client