Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: Dy491WHXjOBJ641YXedmKf3UYoz55yldXKpypudIb8c=
Subject key identifier: 27:69:5A:46:81:F6:2B:8F:1F:0B:F7:0F:96:01:0C:65:E4:5E:17:4F
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 01988CFD8B0D75143806E9A10B83BD308878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0B5F
Signing time: Sat 09 Aug 2025 04:01:23 +0000
Manifest this update: Sat 09 Aug 2025 04:01:23 +0000
Manifest next update: Sun 10 Aug 2025 04:01:23 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: +ZnMKFyGEQKjdaa56mi/1D3egm7Yca8X6mERb4R8fvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:8b:0d:75:14:38:06:e9:a1:0b:83:bd:30:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Aug 9 04:01:23 2025 GMT
Not After : Aug 10 04:01:23 2025 GMT
Subject: CN=27695a4681f62b8f1f0bf70f96010c65e45e174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:cb:9f:6a:74:92:16:14:a4:2a:f8:8d:99:
a6:8c:a1:6f:c8:16:30:80:e3:e6:c8:14:14:ca:cc:
30:6e:75:a9:cc:48:d1:fb:c1:74:90:f5:72:79:c4:
28:73:5a:a1:80:05:83:bf:51:7b:7a:41:17:30:95:
89:9a:50:ec:b6:49:a5:1a:2d:d7:13:a2:72:9c:5b:
2c:84:cb:c1:37:ce:e5:c2:95:0f:78:4f:e4:25:a9:
38:56:1c:9d:56:19:aa:d4:bb:a6:10:ba:0a:d8:31:
bc:6e:4f:d8:4f:c5:6e:b7:9a:c8:17:a6:ea:04:3d:
cf:8b:04:c8:0f:f8:de:4e:c9:dc:67:59:24:3e:8d:
8d:88:3c:d5:c6:ba:b6:f6:c2:90:e7:96:8f:2f:41:
81:64:b7:5a:da:8a:3f:5c:83:fc:cc:1e:44:05:da:
49:9a:03:6e:de:46:c0:ab:67:17:dc:c7:f6:8b:fd:
a6:f3:eb:ff:cd:d2:96:76:3a:7b:cf:5f:17:2c:f2:
c6:c7:d7:b4:3b:1b:db:1e:c3:52:20:1b:32:ad:c1:
88:bb:ab:a1:25:24:2c:75:dd:7c:4a:7e:76:8a:b5:
b1:ad:6c:04:db:f0:46:2f:3f:56:4f:50:81:3a:76:
61:7f:2e:17:76:6d:4b:1e:b7:c4:05:a4:37:38:9e:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:5A:46:81:F6:2B:8F:1F:0B:F7:0F:96:01:0C:65:E4:5E:17:4F
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:c0:3f:04:6e:b9:0e:fe:af:cc:62:1c:68:be:ec:70:88:
67:e3:1d:c0:c1:d7:de:19:fd:3b:7b:18:b1:c7:ca:a8:fa:8a:
10:7b:1e:fb:53:b8:45:5d:27:15:1a:c4:3f:4a:8d:fb:47:39:
6c:b3:11:25:6d:02:52:bd:e0:46:55:5d:7c:0b:e3:56:35:fd:
e0:d9:92:b2:2f:fc:45:89:93:ae:f8:d9:96:24:3c:07:8d:b5:
51:e8:5d:62:58:e7:8a:a1:a7:83:64:d6:1f:6e:1d:f0:b8:3d:
0d:5c:d3:f7:d2:95:dc:ec:5a:51:cd:68:0c:53:2c:59:49:f7:
19:24:0c:5c:70:96:0e:d2:b1:bc:91:7c:ee:a8:86:1f:02:a1:
db:8f:ec:e6:b4:d6:74:32:df:b5:39:87:37:6a:2c:c5:c5:30:
77:ad:f6:e8:18:47:57:be:4d:17:6d:c9:fa:63:46:7f:34:e1:
bb:5a:f7:d4:2a:2b:98:a4:f5:e2:ae:ee:ef:f6:af:66:80:fe:
05:24:5e:b2:a5:1a:68:8f:1a:05:e9:aa:5b:39:0d:76:7c:62:
8f:14:56:62:69:ce:d6:3f:79:8c:4a:42:ec:c3:e7:db:64:d6:
89:6a:99:56:45:bb:c8:28:da:4d:7e:0e:72:4d:5c:a7:76:99:
98:39:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:20 2025 by rpki-client