Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: 0OrfXZy9R3OidcW5KWGsROgOXFORCnm+vpsIv5UWwcM=
Subject key identifier: A1:2F:A8:13:6E:3A:51:85:58:C1:D6:AC:5B:E1:52:DE:AC:2B:A9:FC
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 01988C580E38C0253F6B8D9D880A66CEEDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 1063
Signing time: Sat 09 Aug 2025 01:00:37 +0000
Manifest this update: Sat 09 Aug 2025 01:00:37 +0000
Manifest next update: Sun 10 Aug 2025 01:00:37 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: zMsbg7R0OVgVejlrhre66gny1bS70/CjvxqO8z6uz/k=)
2: SgVaw9dGiBaOyFrQoF1dUXR7CDI.roa (hash: OI5adqW3SJrMIQGjIhmdYoxARRioxuyzaVULjGuGLRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:0e:38:c0:25:3f:6b:8d:9d:88:0a:66:ce:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Aug 9 01:00:37 2025 GMT
Not After : Aug 10 01:00:37 2025 GMT
Subject: CN=a12fa8136e3a518558c1d6ac5be152deac2ba9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:90:30:0d:42:fe:08:ce:e5:ed:19:0b:26:
cd:cf:f6:4e:25:a7:2c:94:8c:b7:03:be:49:d3:d8:
f6:2f:6e:c3:c9:70:07:95:77:96:62:cc:42:52:f1:
b9:87:d5:b3:89:ac:9b:ff:68:fc:5b:34:81:4f:f2:
88:2d:e5:ab:1e:ad:d8:05:b0:ff:55:39:4a:81:66:
b7:79:3e:8b:59:a3:68:52:03:bc:96:a7:6c:3f:b3:
6c:b7:42:fd:30:b7:98:90:f0:9f:e7:48:70:70:28:
a1:59:0c:48:e3:5e:a6:ad:b3:fa:6b:dd:7e:bd:36:
58:fc:d7:f1:b8:ea:9d:a8:13:b7:a9:75:d6:2e:9e:
14:08:1a:13:b9:09:c9:56:fe:e1:6f:51:8e:6f:d6:
ed:4d:2b:ce:55:b7:bc:46:4e:96:3a:d9:ad:82:3e:
59:44:aa:5e:58:b4:94:87:4d:6a:9d:0a:9d:25:c5:
46:25:db:fb:c6:bc:3c:34:31:31:56:f1:7a:aa:8a:
ba:78:75:55:f0:35:65:9f:92:a0:3f:19:5f:72:ba:
06:48:9f:94:fa:7a:60:91:25:01:84:24:79:7e:99:
ee:7e:d8:0c:e5:3b:2d:21:fe:e7:56:a1:1a:4f:50:
8a:52:ba:b3:f9:c2:43:bd:df:2d:b3:5c:b1:1d:b0:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:A8:13:6E:3A:51:85:58:C1:D6:AC:5B:E1:52:DE:AC:2B:A9:FC
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:40:bc:18:23:6a:53:11:18:d1:46:4e:df:5a:e0:69:4d:21:
4a:75:27:af:6b:fc:d8:d5:20:55:7e:85:d3:9a:d6:6c:98:b1:
4b:2a:26:28:a2:a4:86:7d:af:ef:af:de:9c:82:49:d8:4a:8c:
14:58:ea:07:f9:7b:e6:32:20:86:0f:54:90:80:d7:c8:a0:e2:
71:fe:f4:b9:77:49:45:37:64:63:37:4b:89:5a:b2:78:6e:8c:
89:9f:9d:16:dd:58:20:30:a2:43:85:a6:87:f4:4b:9b:2c:ae:
c4:05:ad:74:7d:1f:eb:1d:c2:39:f5:c7:f3:0f:d2:7f:5f:80:
ab:ef:c0:dc:6d:cb:fb:0b:db:f9:1a:5c:ac:28:ec:82:6f:78:
bc:ec:88:9f:44:4e:94:53:3c:4e:fa:b8:b0:13:09:20:3c:a6:
1d:ce:64:59:c5:70:60:e8:80:18:8e:d8:e9:3e:68:1b:b2:00:
0a:2a:e8:d8:cb:d7:bc:44:e9:ce:c2:d5:0b:8b:42:9f:7d:02:
ea:f5:25:c6:0c:49:e5:3e:e5:09:ae:e1:9e:fa:c8:fe:e5:a4:
27:aa:69:dc:23:31:4f:50:14:80:fb:ab:44:12:44:16:da:b4:
aa:10:5f:ef:1d:1e:a9:62:b9:90:22:70:ee:6e:3f:24:fe:f6:
6e:c1:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:22 2025 by rpki-client