Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: ktBHnpWWCX3N6WKYjfi7rtjwpLxfm/phMFUz2jkuRHs=
Subject key identifier: 78:F6:14:53:87:2E:72:93:C4:32:1C:DE:C0:AA:85:CB:6B:B4:D9:65
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 0198917E89FE51FFC19EAF1069A20D49FB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0943
Signing time: Sun 10 Aug 2025 01:00:45 +0000
Manifest this update: Sun 10 Aug 2025 01:00:45 +0000
Manifest next update: Mon 11 Aug 2025 01:00:45 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: wHWXgTNgnEHR5tYAYa0p/+axLIoZaSDuhiy9+brJ2C8=)
2: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (hash: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:89:fe:51:ff:c1:9e:af:10:69:a2:0d:49:fb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Aug 10 01:00:45 2025 GMT
Not After : Aug 11 01:00:45 2025 GMT
Subject: CN=78f61453872e7293c4321cdec0aa85cb6bb4d965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:52:d2:4f:8c:8b:c9:fa:6e:1f:b8:71:ba:
81:f7:f6:ff:8f:7b:a8:37:b6:27:e1:17:74:f7:99:
d6:8c:ab:65:fe:14:5f:89:61:7f:2f:56:99:be:99:
e2:de:59:1e:11:e4:f4:c6:24:4c:3d:7b:29:d4:a6:
d5:9b:48:b2:7a:2d:90:89:25:28:8b:03:87:ee:0f:
59:17:8c:5d:b2:10:32:08:35:a4:cf:67:e7:f2:9e:
24:a9:87:95:cf:e4:00:9f:67:c9:a4:eb:e4:2e:40:
b8:07:2a:be:4d:bf:02:77:8b:d9:56:d9:f7:ae:5b:
73:6a:b2:71:70:70:6d:88:65:35:82:12:b0:42:3e:
a8:f5:cc:28:58:07:6c:a8:a7:e6:35:c5:31:c9:5d:
df:ca:ad:45:5c:ac:54:e8:bf:3f:f0:17:7f:1d:c0:
fe:40:65:dc:e4:81:45:89:2e:31:fa:7f:6b:cf:33:
c2:b8:f1:9c:e4:4f:a3:5c:bb:3b:74:1f:0d:13:f7:
e2:51:92:e1:d3:ab:6b:fc:c4:a2:1f:fa:66:a0:8d:
22:3e:27:f7:db:dd:8b:9f:e5:e8:74:47:0e:b7:39:
4e:46:d1:09:5d:f4:64:a0:96:4c:9a:e1:ee:55:17:
cd:46:03:d1:d2:6c:d5:ad:de:6e:aa:e6:88:5e:6c:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:14:53:87:2E:72:93:C4:32:1C:DE:C0:AA:85:CB:6B:B4:D9:65
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2f:cf:b6:45:29:bd:2b:25:63:52:b2:b7:b5:c7:a4:df:9b:
51:8f:67:4f:89:24:32:c0:7d:58:33:f6:72:7d:e7:75:aa:a9:
9f:21:08:01:52:5d:6c:bd:57:61:20:5f:b9:c6:b4:09:3c:45:
90:d1:4d:1d:29:e3:5b:e9:4c:33:a1:ec:f0:d5:69:7a:9f:b0:
ed:d4:39:cf:7a:fa:b1:3d:30:75:15:97:bd:8f:f5:6e:3f:7b:
2a:41:86:a8:78:88:ba:22:03:c2:ce:25:86:d7:6f:a9:69:2f:
76:1d:88:ef:61:86:9d:e3:b8:d5:82:57:12:ee:dc:0f:ec:c7:
b3:25:a0:3c:a4:77:c0:8b:89:47:49:04:ee:a7:c4:38:08:9a:
cc:56:c5:52:31:b2:dd:5b:43:a4:5d:0f:06:fb:d2:d7:d1:93:
cf:f8:79:ea:fc:76:23:a3:96:b2:77:34:8b:45:5b:b9:e9:8e:
91:08:25:09:b7:06:fd:4b:2d:93:b0:5c:b0:98:60:b7:b4:1a:
ba:4e:cb:5f:45:26:33:25:a3:5c:8a:98:19:f3:dc:4d:c6:15:
8a:41:78:72:9a:50:2e:9c:31:89:60:d5:e9:86:d3:ef:e2:21:
95:e2:d4:03:a5:8b:3d:1b:84:2f:93:77:d3:fd:90:26:5a:31:
30:5c:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:05 2025 by rpki-client