Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: SJur4MsslM0feVXEmpBZ72XUdACPFaNy8xFjjvIuGak=
Subject key identifier: 6D:B9:97:AE:5F:DA:A9:94:81:8F:F8:87:D4:0B:C2:88:3E:9F:48:1B
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019889578FCA406BEC9315555C77AADE5FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 132C
Signing time: Fri 08 Aug 2025 11:01:13 +0000
Manifest this update: Fri 08 Aug 2025 11:01:13 +0000
Manifest next update: Sat 09 Aug 2025 11:01:13 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: Mj2r+SJMtt+WX/Hnr6i9pkZNP+WXr6hqy/ZqD30gCDk=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:8f:ca:40:6b:ec:93:15:55:5c:77:aa:de:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Aug 8 11:01:13 2025 GMT
Not After : Aug 9 11:01:13 2025 GMT
Subject: CN=6db997ae5fdaa994818ff887d40bc2883e9f481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:96:13:f0:61:91:92:93:03:69:6d:52:10:
ba:c1:ad:c3:b3:70:52:7a:f3:e8:e2:67:4a:ae:84:
44:47:2e:8b:bd:84:49:20:4f:8e:14:08:fc:00:3f:
cd:1d:8a:83:6b:23:cf:d7:1a:93:e8:21:33:01:e0:
8f:ce:e2:5f:d5:dd:59:14:32:aa:dc:f1:9b:43:e1:
c7:dc:62:84:cb:7b:84:38:80:5c:fd:66:a7:a6:db:
11:3e:e3:4c:ee:00:4b:a8:6b:f0:ef:01:66:a4:66:
f4:00:b8:d0:13:99:44:95:9d:05:46:e0:f3:98:8e:
4e:24:ab:ee:e2:7f:71:9a:95:9c:23:6c:6a:5e:9e:
15:14:45:d0:31:3d:9c:4f:f7:a1:54:b7:bb:1e:6b:
4b:09:c3:21:e0:71:6b:12:b5:ab:4f:60:93:5d:73:
97:c1:68:eb:d6:df:6b:be:10:19:27:84:99:4f:b2:
51:02:5a:43:f5:ac:0a:c1:d2:51:1b:cd:c4:7f:ee:
86:3a:76:c9:5f:d1:4b:4a:05:18:77:78:78:96:29:
ec:ac:93:9a:cc:88:d2:d0:5c:21:50:48:36:88:8c:
c9:32:c2:f4:ef:ad:6b:18:13:84:5c:e7:42:43:37:
2e:02:c1:3b:31:dd:e1:6b:ad:3d:5a:e6:0a:a0:e6:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:97:AE:5F:DA:A9:94:81:8F:F8:87:D4:0B:C2:88:3E:9F:48:1B
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:b6:61:66:05:8a:0a:42:26:89:fd:91:d8:f3:e5:f0:9b:
6b:c4:81:16:df:6d:5b:01:43:46:b7:b0:18:17:dc:59:9b:1e:
5f:66:c6:d0:79:a4:c6:df:19:ff:6e:12:b1:3a:80:25:0d:b8:
2a:1f:a4:47:28:8d:b2:b0:7a:bf:8a:bd:c0:39:dc:e7:08:97:
19:f4:38:2a:c7:7f:e8:ac:e1:fe:cd:75:7d:7f:2c:d5:e0:dc:
ff:99:ac:73:1a:94:d4:a6:d5:d7:4b:f2:8d:92:83:30:7c:3d:
a1:51:ca:67:ed:bd:c6:c0:c4:f2:f8:2f:73:92:75:df:f7:4e:
ab:63:76:06:b0:03:fc:01:09:ce:a0:71:3c:cf:c5:50:11:35:
48:6a:7b:e2:42:3d:42:53:79:75:6d:43:7b:21:30:f6:f2:e5:
48:a0:c1:b4:c0:59:c9:ef:39:86:3f:e4:14:77:c0:99:a6:a5:
5a:0f:44:05:57:68:47:17:3c:17:7f:f9:48:0e:ee:35:cc:a0:
37:d6:fd:47:f0:20:63:94:f8:9f:2b:a1:4e:d8:c8:b7:b5:ae:
ff:b7:b8:14:5a:8d:ef:39:58:f3:3c:9f:62:8a:dd:6b:1b:0d:
0d:8b:ad:40:3e:a7:05:ed:6a:7e:fc:e6:cf:1b:99:7e:7c:ef:
b8:91:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:17 2025 by rpki-client