Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: SArPP2rCBurr+BDunsoXEp2eu9sXnqheL/j75Cezrg8=
Subject key identifier: D4:78:74:7A:F5:70:36:BE:FB:D3:78:61:FC:87:07:BF:29:AD:75:BA
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 0198827966BEBCC12B387C8378CBDE327015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0B5B
Signing time: Thu 07 Aug 2025 03:00:50 +0000
Manifest this update: Thu 07 Aug 2025 03:00:50 +0000
Manifest next update: Fri 08 Aug 2025 03:00:50 +0000
Files and hashes: 1: HzZn0ba7QItzyWun3HWfVhfe2Mw.roa (hash: iE4IEBeKKD6peBsX5m6y9GBML1LTBu1RqbqOosqLhr0=)
2: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: ayqGmVTmIwqs60Y1IVAPik08LwdsG8HDK1BgoNjNqt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:66:be:bc:c1:2b:38:7c:83:78:cb:de:32:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Aug 7 03:00:50 2025 GMT
Not After : Aug 8 03:00:50 2025 GMT
Subject: CN=d478747af57036befbd37861fc8707bf29ad75ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e9:d0:e5:20:aa:33:a7:26:73:89:b7:fa:3c:
9e:a8:c4:16:3e:14:fa:79:55:47:7e:6d:28:40:19:
95:55:ee:19:fe:18:57:61:52:e7:d9:a4:17:ba:d3:
b4:32:d3:8b:00:aa:b8:12:a5:7f:d6:17:5e:fd:3a:
c6:ba:a6:c5:01:d3:aa:6e:ff:bb:e2:52:4c:29:3b:
a1:ec:43:27:e7:58:35:5b:77:ce:58:65:1f:cb:67:
cf:de:aa:ad:20:dd:22:e2:f6:fc:58:4e:aa:c7:32:
c5:6f:fe:7d:f9:df:35:e2:a0:13:65:ae:f7:ed:8a:
59:19:de:fe:d2:06:f2:66:9b:00:d0:0f:7c:89:0b:
51:25:86:05:09:09:79:77:81:e9:11:55:7a:5f:98:
45:2b:17:cf:a1:e4:91:4b:f2:91:f3:c9:b8:81:54:
4e:ec:f4:0c:9c:2e:10:16:d6:42:4c:cf:2b:d5:12:
c2:56:0c:41:4d:b9:ee:d7:99:28:76:3f:7a:f6:b5:
0a:e3:ff:a5:3d:4a:1c:c3:31:e5:d8:8c:c1:dd:19:
e5:92:b5:f3:00:6c:8c:b2:76:57:19:aa:64:8c:8a:
83:5f:92:4c:c6:86:9b:91:bd:7d:06:61:36:4d:c8:
47:60:4f:fe:31:77:3a:14:5c:f3:d0:89:68:2c:a1:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:74:7A:F5:70:36:BE:FB:D3:78:61:FC:87:07:BF:29:AD:75:BA
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7c:f1:ca:cd:b3:2f:fa:8e:a7:e6:60:5c:8f:e4:61:0a:a0:
21:71:26:ea:91:8d:ca:14:f9:d2:ed:a1:da:44:aa:8f:a7:1d:
82:0d:c9:cb:b0:fa:d0:1a:e5:b6:74:da:19:d8:5e:c9:c4:20:
97:2d:05:d8:67:d8:38:38:3e:0b:b0:ce:6d:83:5c:3b:83:77:
c3:6d:14:98:43:e2:93:8b:28:96:23:9f:6c:bb:2b:86:1f:43:
24:b5:80:ae:c1:9a:93:49:89:63:d8:f2:fd:8d:4f:ca:72:80:
28:f8:18:2d:bb:26:5a:eb:9d:be:d0:7f:97:65:5f:b5:fe:b4:
71:d1:35:aa:c6:02:07:58:fd:c1:19:40:a2:27:43:6b:0d:d8:
5c:69:c4:07:f7:79:0c:dd:c0:63:b3:46:40:17:ff:89:d1:6b:
93:2c:a6:06:70:c8:0e:27:41:17:27:ac:32:3d:d8:74:67:7a:
36:78:99:dc:f6:95:67:f9:f8:16:63:e8:09:8a:59:e0:dc:e6:
2d:2d:2b:91:ea:15:d5:ea:3f:26:a5:87:64:3d:54:92:1f:51:
79:e8:6c:b4:ad:24:d5:5f:37:12:ac:34:35:be:9f:77:a1:43:
d5:30:04:b8:47:1e:8a:73:c5:2c:d5:68:ad:8b:21:19:5d:d5:
ee:6e:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:39 2025 by rpki-client