Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: Gji9qmh40fKb1YpXIGrCu3oyQ8VRW1wEMyawR3D4S9Y=
Subject key identifier: 85:21:22:A8:E0:A9:0B:2F:8D:FD:83:2A:12:8E:EF:D4:EB:F1:F9:FE
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 0198D54DDF308FA7485D95428A42071C1CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 1093
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: ewqbLEaWB8DdWakUsWxpa3Rbh3y0zLT8nbzvqelRFSM=)
2: rYNJq30hG9TfQKEAUAnbb-JlarU.roa (hash: bobhiWtsSX2sPVTtreNAJF6ae9i50YxHtcGAHPsK84U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:df:30:8f:a7:48:5d:95:42:8a:42:07:1c:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=852122a8e0a90b2f8dfd832a128eefd4ebf1f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:e0:b1:ac:78:e4:e6:10:7b:b6:f4:61:db:
51:12:df:dc:d8:cb:37:e6:aa:83:ca:9c:56:29:01:
0e:da:c0:bb:38:1a:de:01:15:2a:9e:3b:e4:31:1d:
93:56:9f:c9:e7:5c:89:a5:55:c0:87:77:e7:7c:0c:
3b:85:6a:63:d9:65:79:1e:6a:83:cc:14:b6:24:9d:
33:df:0b:9a:f5:1a:41:3e:a8:35:88:19:89:8c:c9:
88:03:32:88:ce:df:91:5e:79:b7:e4:80:d4:f0:35:
e4:69:ca:a9:cf:85:65:95:5f:1a:b0:c2:06:d7:81:
39:08:a9:7c:24:fb:e9:8c:5b:88:dc:ef:6b:3b:d5:
dd:6b:de:44:b0:5a:f4:9c:95:25:85:ab:e9:58:c2:
e9:6e:b8:66:fc:73:42:24:6e:0b:7f:e5:ae:0d:a5:
49:d4:d3:3d:b8:2c:87:cd:c3:a4:01:d7:8d:0e:3e:
d6:32:8c:9d:2a:ba:14:e4:b5:0d:8f:da:9c:fe:04:
45:9b:16:cf:b6:48:21:86:07:85:d8:8c:98:2e:01:
1b:f3:a4:15:a6:eb:d3:b8:da:13:6b:1d:fd:51:d0:
e4:7b:86:dc:6b:52:62:43:be:0e:ef:82:4a:34:79:
0b:64:6f:13:49:b0:a3:7f:44:3f:e1:03:4f:00:4d:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:22:A8:E0:A9:0B:2F:8D:FD:83:2A:12:8E:EF:D4:EB:F1:F9:FE
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:70:25:0a:93:ae:2d:f8:fb:72:a9:b8:85:31:44:ea:67:9b:
b8:6c:da:d6:76:e2:7a:6f:54:45:ad:42:00:b0:50:a2:58:57:
b4:b5:1a:70:1d:01:72:45:9a:5c:90:65:a2:89:44:3d:b9:d4:
e6:de:fd:d0:e5:4f:03:8c:a4:e9:3d:73:b4:8f:52:a9:86:26:
2d:4e:92:f9:4e:af:1b:70:9a:d4:bc:33:d2:9a:22:7f:7d:02:
e6:97:a9:45:14:3b:7e:b5:bc:e3:85:8f:e1:32:0b:68:76:72:
e7:35:fb:c9:8f:cb:50:c5:f5:dd:9a:19:5b:d2:4b:4e:35:40:
50:90:2d:64:be:72:f0:81:a8:64:34:1e:ae:49:28:df:16:3b:
f2:4b:97:51:f3:53:c6:93:e6:4b:a4:9f:33:7c:b6:1f:57:12:
e7:0e:24:97:1e:01:71:35:47:c3:b2:4e:ce:59:8e:42:ec:ca:
39:fa:64:b0:26:b2:ba:6c:8e:9e:3c:d0:b0:56:79:5b:a9:e7:
5a:77:ac:22:6f:c4:bc:d6:38:ee:ca:49:91:84:d2:c5:b2:06:
2a:b3:af:27:70:33:4b:ee:40:b2:18:e1:4c:8b:83:19:2d:cc:
f3:a0:af:d8:a1:ea:99:5d:35:29:4b:50:b1:c1:9e:bb:fc:77:
ff:1a:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:32 2025 by rpki-client