Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: Fn6ZB9/7xMN4ZJlSaS93CxDx1Q0DrsRpqRjJ7cJhmoM=
Subject key identifier: EA:AB:16:6B:08:31:BD:EC:97:3C:43:B5:B7:09:C6:9F:C8:20:D7:63
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 01988F22B9AABC6E256929AAEFABD579285E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 160B
Signing time: Sat 09 Aug 2025 14:01:14 +0000
Manifest this update: Sat 09 Aug 2025 14:01:14 +0000
Manifest next update: Sun 10 Aug 2025 14:01:14 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: wdADL3Ayl6QHeyoAQP47Hqwh+cC6ojVQ07W6QQz6W2I=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:b9:aa:bc:6e:25:69:29:aa:ef:ab:d5:79:28:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Aug 9 14:01:14 2025 GMT
Not After : Aug 10 14:01:14 2025 GMT
Subject: CN=eaab166b0831bdec973c43b5b709c69fc820d763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:c1:8c:7c:d1:96:54:78:6e:98:18:72:81:
72:36:2f:97:92:36:41:16:98:0b:e9:5c:5d:76:16:
32:a3:61:12:50:32:7b:5f:7f:3d:d3:ad:63:d1:4d:
bf:7a:9f:2f:13:ab:71:bb:d7:bf:6e:cc:97:2b:2f:
b3:ae:67:6c:9d:82:ca:9d:b3:56:e8:d5:94:ea:59:
e0:9a:6e:63:4b:c8:f1:4b:e7:71:71:00:1f:6d:9e:
53:9e:c2:d0:7f:0f:c9:b4:77:94:b5:27:bb:d1:ec:
22:2a:1d:3e:31:b2:e6:dc:f7:fc:0a:db:5b:b6:3d:
27:f1:74:75:3b:45:f7:8f:2f:42:bc:c9:85:8c:56:
ae:01:e1:ad:f6:22:a6:bb:44:b8:a1:08:0d:04:e0:
b6:77:4e:48:d6:5e:6e:c0:2b:f3:46:66:e4:38:09:
25:4a:8a:6e:76:11:24:4b:94:a6:2e:77:b3:49:45:
54:81:61:41:9e:33:31:72:25:f5:0c:5c:69:79:85:
97:0f:09:0d:16:83:e9:49:df:c8:4e:f7:d9:5f:c2:
fa:d2:58:2d:bb:d6:17:77:7e:4c:a3:9d:f9:d6:ea:
da:66:ad:6b:43:04:97:9d:05:a0:72:c4:3c:40:21:
1f:e0:d5:56:50:cb:88:9b:5b:52:53:e1:8a:90:79:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:16:6B:08:31:BD:EC:97:3C:43:B5:B7:09:C6:9F:C8:20:D7:63
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:87:e6:51:05:ae:0e:d9:ec:b9:7b:5a:97:22:7a:84:d5:
19:4d:88:26:e4:4f:9a:8d:5e:ef:30:96:96:8c:2e:e4:74:8a:
a1:fa:3e:b3:fd:d1:73:c7:e5:87:de:bf:cc:bd:39:31:9c:05:
b9:47:6d:f7:9b:9c:00:a7:48:28:f7:ab:4d:c5:97:16:a7:b8:
69:6c:02:d5:0d:13:63:11:88:0f:4a:8d:25:0a:20:82:d9:1a:
f7:f4:fd:e8:5f:a2:2d:66:6c:99:cc:92:fc:5e:45:47:02:11:
2e:b1:15:56:70:21:00:4c:69:5f:1b:fd:d3:c9:6f:75:16:50:
60:65:0a:93:f3:e2:fc:3e:b3:fd:a3:bf:52:87:c1:20:cb:c2:
ef:29:98:f0:a9:43:3f:a8:9b:70:43:21:0c:76:29:c0:4a:50:
44:18:7c:ad:10:8e:6b:24:8f:fe:cf:b2:a8:b2:57:cd:8b:1e:
c3:f5:ac:00:5d:57:c8:e1:04:21:2d:dd:8c:27:af:69:b5:a1:
a5:53:eb:f6:d8:9f:9d:9f:7f:cf:88:1f:b1:59:e7:c8:8d:ea:
92:83:4d:a0:ce:35:a4:a6:52:a9:8a:5b:8d:b5:c1:51:eb:fa:
0a:50:df:16:57:e0:7e:58:b3:51:38:ab:94:6f:f5:30:58:1c:
80:35:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:46 2025 by rpki-client