Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: 29r2H+Rlm2FzI+ZAXbvaXq6v5n08dFMULvNOEPGhgAk=
Subject key identifier: 1A:28:71:78:79:0D:F1:15:3E:0D:A9:52:CB:33:54:60:A3:A6:70:C3
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 0198D5BC5626DF1626F81A85EDCAF2A46C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0A29
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: +fZP/MP0SwFIrWVAFbDTMXau04gvbhhdwIDuuNSoUaw=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:56:26:df:16:26:f8:1a:85:ed:ca:f2:a4:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=1a287178790df1153e0da952cb335460a3a670c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:4d:e4:93:c1:41:1a:23:02:93:32:27:49:
dd:8e:9a:f4:94:0e:d8:2f:85:de:f2:1c:fa:8c:4e:
c6:2e:0e:38:aa:de:a7:27:8f:57:74:96:ad:34:66:
67:82:39:07:c1:11:08:d5:e6:80:e0:12:fa:4c:46:
06:73:f3:30:f9:c4:ae:91:21:9f:76:6b:da:41:6b:
c2:42:36:ca:d5:23:8e:7f:f8:ab:ba:6d:ef:8b:87:
3f:2a:eb:37:0b:4b:5e:48:60:78:49:36:6f:86:c6:
63:48:aa:b7:03:63:92:a1:29:3b:d3:cd:df:45:68:
40:3b:d9:99:1b:56:a7:c1:33:66:f2:e5:a2:5e:d4:
d8:30:5d:dd:4d:a1:f9:cc:3d:61:07:e3:f5:fd:00:
57:f8:4c:f2:be:19:01:30:91:11:29:53:4c:05:f1:
1e:b0:63:65:4f:0b:6b:68:16:78:80:7a:03:a3:87:
65:2f:ee:76:57:f3:5f:7c:3b:b6:5d:08:e7:b7:5f:
b6:be:13:bc:9f:4c:9e:31:3d:40:25:69:b1:07:8c:
b3:05:21:4b:19:c8:23:26:98:93:36:66:17:ad:42:
68:68:49:23:5a:96:f2:19:c4:45:91:c3:7e:41:ec:
11:20:9d:de:fe:8d:d1:65:c0:7d:36:cc:7f:24:b5:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:71:78:79:0D:F1:15:3E:0D:A9:52:CB:33:54:60:A3:A6:70:C3
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:7f:1b:37:b3:8b:4c:ad:c8:7c:4b:c7:98:4f:05:41:3b:
79:7b:9a:1d:9f:4e:b4:cc:ec:ac:37:ec:ba:96:e0:91:47:ec:
7d:76:24:94:6f:c4:50:07:43:9f:25:05:27:5e:ee:ee:cc:10:
58:63:df:23:e8:97:c0:6a:f9:5d:d4:0c:c8:89:06:8b:43:32:
80:18:5c:f8:11:86:02:e8:89:fa:01:3e:82:1c:72:8e:5a:fb:
a4:06:5b:a9:d3:1d:13:a9:19:f3:c2:51:d2:13:99:bd:8e:5b:
e1:eb:cd:c1:c2:9a:05:47:0c:9d:a6:38:25:e6:e7:2e:17:62:
74:d8:2e:6c:aa:98:ae:49:32:58:88:5a:08:a6:85:ab:ab:a6:
3c:05:d8:c7:f4:92:d6:e1:63:fc:ec:ee:1d:6b:38:35:fe:83:
7e:82:f3:1a:32:b0:ac:ef:79:7d:b5:e7:4d:73:73:85:47:1a:
f4:7b:96:3d:05:15:08:f1:b5:51:7e:cb:94:22:0b:9c:de:c5:
b3:42:23:15:47:7d:94:3e:58:15:5d:a0:f5:8b:67:72:8e:20:
64:8d:4d:e9:93:9e:1e:0a:ab:06:51:7d:6e:3c:38:e1:94:0d:
7d:89:02:bc:4e:52:3a:d3:0a:6f:ad:fa:c0:62:6c:90:6c:f9:
e1:e9:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:46 2025 by rpki-client