Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: CFnqKc0n8kwWDXdLFeKjpoG5U83Nu2n8ibvtZEqzIHk=
Subject key identifier: A1:9C:BB:F0:EC:6E:D8:58:03:FF:ED:78:D3:A9:A9:6F:AF:FC:D8:E6
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 0197B6D7376E1042B4811D398B1792B6D907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: Jq+/HVb7Ndf1DKkjPqwcSjHfgl2gXuFyDU5JAfMAqTo=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:37:6e:10:42:b4:81:1d:39:8b:17:92:b6:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=a19cbbf0ec6ed85803ffed78d3a9a96faffcd8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:19:8f:5e:d5:9c:23:cb:31:fe:41:96:22:
74:29:b5:d4:59:38:8d:8e:d3:6b:17:c8:cf:ea:b9:
69:09:a8:5d:cd:cd:07:8c:d3:53:26:b7:3f:6d:f2:
a6:d6:2b:16:9c:2e:0e:a8:53:3f:f6:c8:07:dc:c4:
97:ef:5e:35:b2:62:9d:b3:0f:07:ff:f2:07:f2:85:
75:3d:ce:af:31:8f:a6:f1:98:38:dd:3b:28:7a:c9:
9e:26:97:18:4d:86:8e:1f:83:d1:52:9a:a2:f6:c0:
d0:95:74:13:ab:14:ed:19:f0:5f:a3:41:18:ba:07:
98:78:72:9a:f3:0a:ec:ff:e1:14:65:61:91:70:0a:
69:61:40:72:d7:6d:b4:39:b4:ec:93:56:8a:29:31:
2e:2f:c9:37:83:8e:d6:e7:ba:6d:0d:cf:c7:c6:d8:
86:0f:da:ca:9d:02:94:8f:fc:d2:fa:9e:d6:1f:16:
c9:78:2f:53:d9:02:71:75:2a:0e:ff:75:63:c9:1f:
ee:7b:62:e2:a8:16:25:ae:66:af:c0:3f:20:ec:94:
24:cb:16:b7:5b:38:7e:fb:19:07:73:44:d7:2c:15:
cb:d1:b3:9a:98:8d:c0:ae:c9:3c:9a:62:03:a0:7a:
fc:c6:d9:d8:12:07:e1:06:53:0d:84:3c:02:9b:56:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:BB:F0:EC:6E:D8:58:03:FF:ED:78:D3:A9:A9:6F:AF:FC:D8:E6
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:34:4e:1b:c8:6c:6c:6e:92:06:b8:03:03:40:e2:f6:2b:
7f:c9:d2:92:ed:09:38:5d:de:eb:8e:51:a4:a2:64:fb:38:4f:
26:31:47:fe:7f:f0:39:31:6f:a5:d6:62:b8:24:60:8c:bf:15:
9b:c1:89:3f:3d:d4:93:7a:d9:e8:66:4c:b6:3c:7d:10:c1:e3:
58:3c:78:6c:ab:43:71:f4:20:bc:39:d7:f6:c3:fe:77:69:00:
b0:56:64:68:00:3a:d4:74:94:1d:02:44:1d:28:40:72:93:dc:
0e:32:a5:7f:c6:21:7f:be:cb:c0:77:e9:c6:b9:1a:ba:31:69:
bf:cb:f6:76:5d:38:ac:73:75:55:fa:2d:91:d8:df:46:ed:3d:
a8:17:7c:f1:e2:d0:75:fb:04:36:65:60:fa:f3:f6:69:70:d9:
3c:bb:83:c4:0f:57:7c:a5:17:0c:5d:63:1c:cf:9c:06:1a:05:
b3:69:ed:c0:78:e8:09:8c:18:9c:99:6f:3b:a7:0e:d6:eb:c5:
eb:f6:9c:b2:95:99:50:2f:3b:9d:18:3c:05:d6:b0:a9:54:a4:
f2:a8:23:c8:6d:00:85:93:1b:95:56:a9:39:05:af:d5:1a:2b:
9b:ba:e4:ab:41:c7:29:a6:98:7a:3d:7d:fa:25:32:b6:d4:63:
2a:e8:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:27 2025 by rpki-client