Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: +XWvH2il8jO2hRp6+AvgnOXf9LeZ7dS1ZfXSi+ZZgbg=
Subject key identifier: 49:C2:D1:22:1C:46:44:9F:60:D6:8D:33:5F:FF:67:97:49:FE:42:13
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 0197D47480277B9FF949E7CFDE72D4277943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 100E
Signing time: Fri 04 Jul 2025 08:01:33 +0000
Manifest this update: Fri 04 Jul 2025 08:01:33 +0000
Manifest next update: Sat 05 Jul 2025 08:01:33 +0000
Files and hashes: 1: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: x9uEcBq373Bgn8zXfxJ0yaopAo/RBGnX3GdC5zEERyo=)
2: rYNJq30hG9TfQKEAUAnbb-JlarU.roa (hash: bobhiWtsSX2sPVTtreNAJF6ae9i50YxHtcGAHPsK84U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:74:80:27:7b:9f:f9:49:e7:cf:de:72:d4:27:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Jul 4 08:01:33 2025 GMT
Not After : Jul 5 08:01:33 2025 GMT
Subject: CN=49c2d1221c46449f60d68d335fff679749fe4213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:0c:24:7c:74:68:44:04:30:1d:e9:aa:db:
fa:f9:95:2e:27:4f:e4:dc:48:59:c8:fb:9e:88:7b:
4d:54:de:5d:64:b0:32:09:1b:be:b2:cc:c1:68:4e:
fb:99:0d:43:ff:9a:8f:7c:5c:dd:ad:83:ca:99:1d:
51:bc:53:67:58:1f:c0:9e:54:85:01:46:58:81:d2:
f0:1e:ce:1b:33:fd:dd:ae:ba:47:32:ec:ad:f2:22:
05:8f:90:a6:0f:ea:5f:16:da:cd:6d:bc:54:7e:9a:
12:cc:ff:db:ac:c6:35:5b:76:2d:69:7f:fe:98:cc:
99:97:9f:7b:d4:3f:2e:16:2b:07:52:df:6f:1c:8d:
64:81:03:30:4e:0b:d9:13:69:4c:1f:f3:87:16:90:
6c:fc:93:e0:99:81:7c:d6:ce:32:d8:bd:43:96:90:
96:0c:63:23:b2:fc:93:2e:ef:86:11:ca:c4:62:3c:
3d:6e:84:d6:53:3c:08:52:d0:fb:4b:ca:cc:14:13:
81:23:b2:a5:93:08:19:b3:e8:ed:14:fa:94:d9:b4:
e0:48:ea:81:52:25:2d:32:7b:8d:c1:86:05:7c:94:
8f:93:fd:16:36:a8:27:4a:f9:37:ad:17:7d:f7:68:
d4:fb:61:d7:28:4e:84:02:c7:63:2d:63:85:1f:34:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:D1:22:1C:46:44:9F:60:D6:8D:33:5F:FF:67:97:49:FE:42:13
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c5:69:62:a3:29:98:46:7b:42:f7:0c:c3:13:43:f9:0c:c7:
19:f6:ac:e6:7c:47:dd:81:2a:50:16:35:f2:fc:0d:53:46:8c:
dd:71:b1:c7:ea:46:08:c0:a4:a7:f5:33:b6:ef:ce:96:bb:57:
3e:2c:8f:6b:dd:96:d4:36:30:ce:d4:3e:43:a7:34:43:05:8f:
0c:09:8d:ab:33:4f:5f:b5:14:f5:6a:3a:cb:0f:0a:19:8d:3d:
c1:fe:c8:52:40:9b:e5:43:61:0d:5b:7e:54:d4:68:1b:a0:37:
97:03:bc:85:6e:52:97:8c:12:64:16:d5:98:79:40:19:35:09:
e9:14:27:7b:a5:ba:3c:12:f0:41:08:96:ab:62:a4:b4:3f:32:
b9:65:28:79:42:77:ee:7d:40:cc:82:2f:de:ee:44:78:76:15:
63:ac:f7:99:19:7a:fa:46:81:72:30:1a:b7:4a:69:f1:6c:a8:
af:04:f0:4e:d8:94:c7:cd:2b:9e:a6:6f:5c:e0:53:ec:3d:18:
20:04:d5:a2:88:7f:99:3f:78:89:31:9a:35:d6:3c:f1:f5:28:
55:8a:46:d0:dc:13:3a:be:b9:b2:13:0b:34:d6:40:34:93:85:
dd:81:07:39:40:45:63:06:eb:b4:99:6a:e0:3d:1e:02:c1:53:
c7:cd:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:08:01 2025 by rpki-client