Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: KUWbacncSTJ/3kN4Z2ZZEKC2S00BhHe5RDAbapznAF4=
Subject key identifier: 62:07:01:77:9E:0E:AF:CC:C3:FF:61:50:D1:47:D3:01:58:C9:D8:3D
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 0198801D73F9ED6BFC24404230FF2E60F278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0955
Signing time: Wed 06 Aug 2025 16:01:10 +0000
Manifest this update: Wed 06 Aug 2025 16:01:10 +0000
Manifest next update: Thu 07 Aug 2025 16:01:10 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: +lwDI6SjzbW3m46Kc13TkNJ4O3nAyRKn36sPP2aKGFM=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:73:f9:ed:6b:fc:24:40:42:30:ff:2e:60:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Aug 6 16:01:10 2025 GMT
Not After : Aug 7 16:01:10 2025 GMT
Subject: CN=620701779e0eafccc3ff6150d147d30158c9d83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:99:50:fd:48:09:cf:69:8a:c5:82:ee:d6:
68:c0:69:a2:3d:ba:58:06:90:fb:90:63:24:ea:0e:
56:ac:35:a5:e7:b8:f8:f9:55:be:f4:6c:0c:f2:bf:
d9:d4:54:c6:c8:35:79:7e:0d:66:82:85:06:19:ba:
2e:99:85:c9:84:74:f6:bf:f7:74:5f:be:02:8f:37:
fd:c9:d0:31:50:3b:0b:e2:dc:0d:f2:f0:a4:09:28:
cf:09:b4:99:54:cb:24:72:72:ce:76:96:b7:c4:a8:
ca:c1:4a:6f:99:df:1e:3d:ab:6b:dc:e7:fd:7b:6f:
cb:59:01:64:bb:4e:e3:85:02:b3:1a:8f:a4:8c:2a:
74:e1:49:60:ce:e7:03:2d:8e:fd:c3:42:03:dc:9b:
11:d9:41:63:8f:0b:ed:7c:7e:9f:13:89:91:63:7a:
3e:f1:7c:ca:a9:bd:ac:39:fe:ad:5e:8c:86:22:93:
f7:83:44:b3:e9:a2:49:86:46:34:50:4e:78:5f:0d:
79:fd:ff:0f:b7:dc:b2:05:1b:60:c4:c8:ce:a8:16:
71:4b:d7:bf:c4:0b:14:3a:42:3d:10:1a:10:63:ce:
07:3a:11:21:7b:b8:57:38:41:42:30:d6:3a:ad:a5:
10:3c:00:f5:aa:ed:1e:93:91:0e:10:c7:c6:4e:f1:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:01:77:9E:0E:AF:CC:C3:FF:61:50:D1:47:D3:01:58:C9:D8:3D
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:3d:b7:9c:ab:65:f8:c0:39:ce:24:e8:a1:cc:fa:37:8c:
63:5e:4c:f8:ba:2e:70:38:1f:84:90:04:3f:bd:ad:ed:8c:f4:
6d:82:54:41:98:3a:ca:40:1a:29:61:5b:5f:52:b3:5b:22:86:
21:9f:fd:90:51:4b:da:74:9a:3b:fb:b1:cc:d1:51:be:be:c1:
cd:a4:f8:cb:8d:04:e6:51:fc:5f:e4:c4:cf:3c:23:e3:a3:95:
a3:8d:21:14:b2:21:a7:0c:2c:4c:0f:85:a7:9c:d3:b3:af:13:
4e:fd:c1:5c:b0:95:86:40:46:6a:74:53:35:03:e2:ae:18:24:
aa:b3:9c:db:39:b0:72:c5:3d:63:bb:c5:41:74:cf:d7:e9:61:
44:b5:c5:65:67:9d:d8:3a:98:6c:f2:fd:34:98:34:ae:4f:dd:
f9:6b:3f:d2:94:80:63:0d:4f:fb:37:6d:75:db:c0:14:8d:09:
c1:ca:a8:28:bf:15:f2:aa:57:83:93:83:28:ea:3c:14:0a:94:
81:35:db:94:2f:0d:ff:23:6b:03:f0:43:36:d0:db:a3:3c:7c:
d3:a2:51:8f:1b:f2:1f:8e:05:59:89:b4:f9:a6:e1:28:16:5f:
dc:98:c7:15:2c:a0:37:b9:cb:be:da:4e:21:72:be:7d:c9:d4:
83:9b:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:18 2025 by rpki-client