Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: Pw0mI52HEI8vm3FRWQ27nRFZEDbVkpXsSp9H3Xx4aHo=
Subject key identifier: 54:5C:21:DB:D8:FE:64:8F:C3:48:1B:25:36:CE:A3:36:C4:9B:70:FE
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 019874BE931B80E5A953B19885C5B776AE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0CF8
Signing time: Mon 04 Aug 2025 11:01:43 +0000
Manifest this update: Mon 04 Aug 2025 11:01:43 +0000
Manifest next update: Tue 05 Aug 2025 11:01:43 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: W0cOJhzW8wqRTT5QMTFT9AoOD/BR5bE6w5BqMliOSEo=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:93:1b:80:e5:a9:53:b1:98:85:c5:b7:76:ae:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Aug 4 11:01:43 2025 GMT
Not After : Aug 5 11:01:43 2025 GMT
Subject: CN=545c21dbd8fe648fc3481b2536cea336c49b70fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7d:92:fb:0a:7a:dd:72:af:ae:92:5a:45:7c:
72:80:a0:82:09:b4:50:30:d7:ae:62:d0:9c:38:28:
4c:bd:dc:29:f4:f8:0d:14:66:3f:91:58:6f:d9:eb:
18:1a:b0:fa:3e:18:89:62:18:21:35:c2:6d:96:99:
5d:9a:10:40:ff:4b:f1:e8:c3:b6:9d:5a:88:9c:fe:
4e:a6:a5:2f:83:cc:f8:3c:c1:e1:f9:68:5b:6c:7b:
29:ef:f0:e0:ff:90:cc:7f:36:dd:d7:26:dd:7a:51:
3f:1e:cf:fb:21:02:73:1b:4d:ed:25:70:d9:3b:92:
4a:99:70:10:b3:f4:44:74:7b:ee:08:f4:f4:37:ff:
e6:b0:74:ee:ce:5b:06:f2:11:0e:cd:e8:db:92:33:
99:ab:ed:a3:a5:2f:c1:75:bd:b4:d4:9b:05:4b:33:
c7:fc:29:1a:72:ef:d1:64:15:1b:b5:1f:03:73:15:
37:99:1d:22:3a:20:a5:97:a3:d6:dd:c0:f7:c1:bc:
00:bc:45:a2:15:a3:ff:05:ff:1a:76:ca:d5:23:82:
4b:85:ae:06:1c:63:e7:30:8e:ca:63:e9:44:4f:50:
d9:50:cf:6d:04:e9:d3:94:81:ac:a5:df:99:38:01:
fe:b6:1a:3d:da:04:03:6d:65:04:75:58:7e:5d:5e:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:21:DB:D8:FE:64:8F:C3:48:1B:25:36:CE:A3:36:C4:9B:70:FE
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:07:f1:71:2c:ec:bc:a1:2d:45:ae:7e:df:8c:89:b5:95:80:
d2:66:46:75:bd:e0:7e:2b:a0:35:e7:c9:15:1d:75:47:a1:fb:
02:94:51:4a:92:97:fc:fa:cc:4d:86:5f:69:c6:b7:3b:1e:95:
8b:d8:c4:ae:51:58:41:b1:63:4e:68:68:e2:21:b3:ba:98:38:
c4:30:64:6d:f4:75:73:75:07:75:ae:3a:cb:8b:43:ac:fc:32:
75:78:75:40:16:66:15:12:74:a2:ec:27:22:20:d6:9d:03:27:
3a:9c:8d:d9:b6:c1:1a:48:d0:61:e0:fb:4d:30:4a:ed:4d:99:
d3:9c:97:59:b4:f7:c4:4e:eb:69:a6:f0:44:8b:d9:fa:d8:49:
0c:4e:e8:39:20:b7:5d:46:3b:e2:1c:4e:f6:e9:6a:25:7d:d8:
12:a6:7a:22:29:32:7b:17:76:63:59:72:34:f9:7b:7c:67:24:
f1:9f:20:88:e6:7c:68:8f:e4:7f:a5:b9:90:53:2e:f3:13:7d:
8d:7d:fa:72:19:53:c3:d6:89:8c:4a:ae:e0:97:b8:1d:b6:01:
b9:f5:c6:57:76:59:95:81:95:0f:fe:20:75:6c:df:d9:5f:da:
b8:fc:05:fa:18:46:72:ba:9d:8d:f5:90:55:cb:32:18:40:fa:
e9:46:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:52 2025 by rpki-client