Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: z7taMJ+2klhuSaQTBu6N0Zq6e7g3V2HswFw9OeGze1o=
Subject key identifier: 77:D8:C4:00:6D:32:AD:4F:B1:12:82:D3:D6:18:C2:01:12:AD:93:63
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 0197B5FC2E30CECE30B5C6580E5A9D82FB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0994
Signing time: Sat 28 Jun 2025 10:01:32 +0000
Manifest this update: Sat 28 Jun 2025 10:01:32 +0000
Manifest next update: Sun 29 Jun 2025 10:01:32 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: S1z3j8uwQe2e4rNXrzoHQPBO3NDYf3FuhhhZdl3ErMI=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:2e:30:ce:ce:30:b5:c6:58:0e:5a:9d:82:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Jun 28 10:01:32 2025 GMT
Not After : Jun 29 10:01:32 2025 GMT
Subject: CN=77d8c4006d32ad4fb11282d3d618c20112ad9363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:27:95:a2:42:c6:8c:eb:87:81:98:e6:2e:
89:ef:59:a6:a8:cb:18:f5:28:ba:87:39:30:49:7c:
13:1f:e1:16:57:88:de:27:ba:82:da:8d:b8:d2:55:
b8:f5:fb:02:ec:5b:e7:36:60:f0:78:2a:2c:c2:36:
b0:31:7b:c9:07:2f:bd:44:28:1a:51:6b:7b:27:91:
6e:43:84:32:a1:10:b2:b5:8c:59:cf:90:ab:e8:52:
30:25:dd:2a:eb:e6:45:55:5c:e9:22:e2:c1:37:d7:
8b:a6:11:fc:91:ba:d7:0e:50:89:b6:e1:90:ea:d7:
a2:2d:30:f3:72:15:34:12:90:18:69:32:56:47:a3:
00:c5:72:d4:b7:cc:85:47:fe:8e:5f:04:6b:f3:95:
89:69:d5:89:9e:10:27:5f:b7:57:74:26:34:f8:b0:
21:76:53:0f:bd:0f:bf:1a:43:ac:43:f6:6d:f8:3b:
44:06:df:a2:25:db:09:3e:0f:e0:c4:fa:99:42:9e:
b1:f9:99:e8:63:50:bc:35:0d:71:b2:41:fd:e8:99:
e2:cf:cd:16:ef:3f:35:8f:d1:fe:d8:57:e9:ef:c1:
5a:ce:4a:c6:83:58:82:89:c1:4e:fc:c9:93:4f:1d:
12:a3:38:45:ad:34:35:d9:31:20:fc:b0:8b:00:bc:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:C4:00:6D:32:AD:4F:B1:12:82:D3:D6:18:C2:01:12:AD:93:63
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:60:22:7f:62:92:15:f9:81:5b:03:1b:1f:a1:b0:3b:6d:
b5:2b:db:53:53:ab:1e:56:a9:ec:d6:cc:0e:5d:9a:78:70:15:
7a:aa:af:18:4d:07:b1:86:a0:80:6b:c0:f8:99:99:15:fa:e5:
11:ed:41:7a:00:35:89:97:6a:67:44:6f:8d:5f:c9:fe:6c:b2:
c6:fd:97:86:ea:39:27:49:be:6d:cf:c5:20:89:a2:af:fa:7a:
b4:75:3d:53:62:63:3a:27:77:7e:73:5c:90:f5:e8:51:65:d5:
e1:07:88:77:cb:d9:81:56:9c:cd:13:32:81:65:0e:59:99:fc:
d6:93:b3:4d:55:52:80:6d:e8:71:6a:ca:2d:3b:08:75:fa:f7:
2d:df:cf:f9:98:c4:d3:df:52:d4:1d:6b:68:6a:32:2f:6c:92:
0c:39:83:82:c6:69:84:9b:ba:be:bb:a8:8e:47:ab:e4:43:a4:
08:11:9f:45:fe:f5:56:c3:5e:c7:02:a8:71:17:77:46:64:3b:
8e:d4:4b:cb:4b:77:b2:56:bc:19:2f:37:39:f4:bc:ac:91:29:
cd:e4:cc:c4:ef:33:fe:c9:5f:89:3e:8c:a6:31:c4:62:7b:7c:
26:b8:6c:83:03:09:85:3b:39:e1:fb:67:ba:d2:55:a2:0a:f0:
ed:e1:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:52 2025 by rpki-client