Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: jz/EKEDGGbGllKzRZRvxzbYwSAQO8kb0J1EhNChdtbM=
Subject key identifier: 0B:E1:53:28:40:FD:57:58:D4:A0:33:7D:99:19:76:3E:53:0E:55:EE
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0198752C26D1AA0A67696E0119CBC16DA436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 09F5
Signing time: Mon 04 Aug 2025 13:01:24 +0000
Manifest this update: Mon 04 Aug 2025 13:01:24 +0000
Manifest next update: Tue 05 Aug 2025 13:01:24 +0000
Files and hashes: 1: CYUWyH08nSa-KNxWDGTjv6_KrDA.roa (hash: KMUhfWroZPG+FRu1BUKf7xS2B+LcV5CP3rpU9RZoiXs=)
2: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: MXnSfI2TS5/u7tjBrFp0LpRGq0YGLXwcTJNCWiVzw/4=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=)
5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:26:d1:aa:0a:67:69:6e:01:19:cb:c1:6d:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Aug 4 13:01:24 2025 GMT
Not After : Aug 5 13:01:24 2025 GMT
Subject: CN=0be1532840fd5758d4a0337d9919763e530e55ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:7e:29:3d:b9:ef:17:8a:33:b4:f1:d3:af:
0b:33:8a:56:08:1f:99:06:35:08:c6:7e:c1:4e:63:
5a:f1:94:2e:a0:ed:b5:21:7a:98:48:c0:df:b2:22:
bc:bc:49:eb:a4:f7:2f:fa:72:42:3b:c8:51:85:53:
07:4e:b2:c9:5b:ee:18:56:ee:3e:19:50:67:b1:31:
a6:a8:0c:05:db:64:62:bc:10:a3:4f:bb:c9:a3:41:
83:20:83:ed:39:87:43:3d:3c:82:31:77:18:d3:ea:
58:e2:1f:94:4a:99:82:a1:06:9c:f0:4b:e2:34:08:
11:35:fa:0d:5c:91:25:9b:fa:49:b7:54:da:fe:78:
e5:3b:d8:98:3a:d7:6a:e1:0e:49:5f:cf:82:0d:30:
9b:86:ad:1f:f3:66:41:3a:61:19:62:9c:6e:76:10:
50:9e:7f:7b:04:9a:a3:a9:e6:46:c4:e0:3a:82:50:
1b:e2:37:d1:bb:87:5e:d8:3f:3c:0e:da:9e:ed:a2:
84:da:12:96:60:e4:40:45:d6:58:34:68:0c:2e:e8:
fb:96:6d:94:35:be:09:12:3f:8b:cf:c6:a6:72:01:
f1:e5:97:b8:3e:9b:18:a6:03:bd:17:5d:54:f5:80:
fc:aa:70:07:f6:08:07:a6:45:6b:f1:4f:fb:7c:70:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:53:28:40:FD:57:58:D4:A0:33:7D:99:19:76:3E:53:0E:55:EE
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:e0:be:a6:9c:c1:c3:d1:23:3f:99:f1:4b:81:d7:71:32:
a2:74:e9:29:fc:5a:22:60:2d:8e:c0:fe:dc:c2:f0:aa:23:9a:
db:71:b5:04:de:d5:5f:f9:b1:ce:95:9d:6f:70:23:3b:2e:60:
ee:ae:dc:cb:12:b5:ec:7d:56:a4:e0:99:32:2e:87:60:86:10:
5d:b3:d2:46:60:6e:c7:df:08:52:f1:e4:c3:f3:13:b1:c4:f3:
8b:05:bc:54:02:53:56:fb:22:5e:7e:ac:a8:e5:54:53:bd:e5:
1e:17:45:9c:cf:17:28:a0:a3:e6:c5:0d:b3:75:14:c2:b5:d0:
d1:33:cd:61:6f:c9:73:c1:e1:1c:5b:9d:cf:ff:7e:15:58:36:
11:11:ee:5b:f5:8c:d7:d8:d6:4f:2d:fa:87:83:bd:be:ee:dc:
dd:d2:05:ca:9b:52:81:08:1d:94:b5:e4:da:31:19:bc:4d:e7:
4a:00:ff:53:40:7a:29:ca:93:38:27:61:c6:5e:7a:98:d7:f2:
3e:b1:d8:0c:04:0c:5b:3e:59:8f:5b:48:b4:e6:6d:03:9f:be:
3f:4c:6e:02:64:18:56:a3:69:dd:83:f8:94:f5:b5:88:56:f7:
9c:b3:05:89:63:6d:d2:3f:37:53:90:9d:bd:08:c4:46:6f:fc:
28:73:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:08 2025 by rpki-client