Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: EfJzQeIHLwQxNguv/u+by6wG1ZhTLd5cpqWzL03bewg=
Subject key identifier: 18:1C:1F:2E:F2:66:91:6F:74:0F:C3:57:10:96:E1:8D:13:E6:36:F1
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 01987450337E1707EB116D461D76D3A17DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 0284
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: RuzPdMxCpz0BPKdSJbA/sJmWDlCo4ht+M6RKO+0lTQw=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:33:7e:17:07:eb:11:6d:46:1d:76:d3:a1:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=181c1f2ef266916f740fc3571096e18d13e636f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:f8:0d:10:74:25:f0:f8:0e:2c:b1:7f:9b:
08:9b:cc:8e:8d:85:17:75:68:17:43:a5:b8:14:e2:
12:86:ff:93:ec:f4:fb:f2:e1:9e:46:7f:10:b8:12:
2a:df:eb:3c:c8:d7:5f:42:d3:74:78:75:0b:a0:3d:
91:24:67:8c:8d:ad:61:e7:74:38:50:ab:aa:cf:2b:
55:af:83:bb:38:92:62:ef:17:50:73:34:a7:48:30:
66:cf:78:8c:54:1c:09:68:f1:56:4b:bd:9f:eb:25:
73:36:8a:24:d7:fc:21:3c:6f:6a:60:5b:3d:3d:92:
fb:c1:92:10:15:85:d3:ff:53:b7:6a:9e:b7:35:30:
12:66:6d:32:c7:ff:27:c8:ed:ee:fd:af:da:a6:89:
a7:a7:8f:f2:b8:09:58:e3:4f:f2:f2:81:f0:cd:c8:
10:e5:04:84:d8:a4:cd:fe:b4:60:3b:50:d6:c5:0f:
de:9c:ac:90:a7:54:d7:01:7a:28:a3:c8:67:8a:ff:
b9:72:b3:07:37:bf:ef:2e:36:af:2b:3d:2b:2d:44:
b9:a4:26:e7:ea:a2:60:0a:2c:06:4d:1f:8c:4a:7d:
a3:9f:10:e9:30:8e:53:04:c5:4f:3d:ae:3d:43:08:
a7:64:47:f2:f2:df:a8:3a:97:d1:6f:50:4a:a6:1f:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:1F:2E:F2:66:91:6F:74:0F:C3:57:10:96:E1:8D:13:E6:36:F1
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:26:7e:07:47:0a:8c:2e:35:06:24:80:e6:88:ea:9e:ed:ed:
d0:1c:d9:27:08:aa:d0:41:f2:48:60:95:72:e1:39:20:a9:ff:
cb:e9:e8:16:92:b5:41:d0:17:e0:b0:d7:53:71:6d:bc:26:ea:
43:5d:89:a3:d6:37:94:a3:eb:3a:af:dd:00:60:d1:32:a7:56:
e5:6b:e0:51:30:8e:f7:e1:2d:54:bb:7f:e5:28:8e:23:d2:8f:
d8:d9:20:1a:aa:52:a7:c8:62:2b:d3:2b:fa:6e:54:b9:65:ed:
98:be:90:c0:00:b5:0d:28:1e:06:fb:e3:8d:ee:dc:aa:ca:5b:
03:3c:60:4e:ff:24:88:32:c3:47:2e:db:88:14:c5:d8:9f:9d:
f2:f5:ef:9d:7e:c5:b1:6a:54:e9:c6:f3:4a:c8:3a:f9:b1:c6:
a4:7d:81:79:62:14:04:99:51:99:af:96:1d:62:c2:1f:b9:5d:
87:98:ae:b1:e3:d7:ea:df:e1:79:cd:83:65:fa:d5:c1:d9:14:
ad:4e:cd:1e:cd:48:20:67:a5:1d:05:d9:80:97:fe:1d:01:07:
89:ae:92:37:e9:16:07:23:56:f0:d9:15:ae:5a:1c:56:05:c4:
a2:08:a4:f4:8c:27:14:f0:6b:e1:a4:90:8b:34:69:f6:8d:9b:
c4:3c:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:47 2025 by rpki-client