Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: AipbHqodDmWntCaBmH4VIISMszPqlA9iVVmb2sVSjh4=
Subject key identifier: FE:3C:B0:ED:57:05:18:85:FB:53:E0:83:E1:AC:03:6A:37:A7:26:48
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 0197B6A118EC61166BD4CEBC1433D2DE8258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0A54
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: i+3qbqSFlr4rVgk0sypE8JzvqhcsWK7mgLYSzZcbp18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:18:ec:61:16:6b:d4:ce:bc:14:33:d2:de:82:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=fe3cb0ed57051885fb53e083e1ac036a37a72648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:d8:57:e8:c5:51:4e:95:4e:61:c0:1a:28:
80:cd:62:d4:c8:5d:73:3e:45:d2:5c:93:0c:14:ba:
05:3e:b3:05:88:64:97:d5:19:9d:1c:3a:3b:f6:7a:
36:9e:7f:20:d1:f1:ea:f9:49:ac:40:04:da:a1:e6:
e7:15:fb:81:ec:c2:13:a7:75:a9:ef:30:ae:a0:86:
c9:75:6d:98:b3:16:18:5b:8e:10:80:b2:39:d0:64:
bb:76:4d:ba:df:72:96:a6:e6:4c:25:64:37:35:22:
91:b1:5f:c3:50:12:a9:89:6b:12:9f:32:3f:16:b0:
8f:9b:24:29:60:29:a8:96:c2:10:78:87:1d:a2:7d:
8c:30:c1:44:d5:c2:56:79:3c:e6:2b:1e:18:81:d0:
d6:ac:f0:d6:9e:b2:0a:74:a1:87:68:b3:f1:1f:63:
48:8a:d7:16:16:cb:44:7d:22:5f:4e:00:24:f4:6f:
56:8d:4f:78:3c:00:ea:d3:91:a5:f0:47:c0:0e:0c:
7a:d5:1e:8f:1e:00:1b:b0:87:0b:59:01:f2:9e:2c:
34:23:10:b3:48:0e:34:78:f7:49:de:7b:01:6d:ed:
9e:1f:85:e8:90:4e:45:21:7f:ac:9e:18:fd:59:12:
32:15:46:b2:c3:19:a6:7e:50:7a:89:52:4c:d3:4d:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:B0:ED:57:05:18:85:FB:53:E0:83:E1:AC:03:6A:37:A7:26:48
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e7:48:78:f2:3f:20:fc:c5:2f:0a:5c:53:89:af:c4:5a:67:
2d:10:f1:46:aa:69:dd:fa:ad:06:42:c1:0d:c6:a9:84:60:7a:
17:f9:82:bb:5d:e1:c7:4b:8a:dc:c3:1d:a2:25:af:a5:b5:aa:
e6:76:8c:d1:a6:87:9e:65:4c:25:da:3d:ac:10:b8:15:32:dd:
0f:89:4d:87:0e:f6:c9:76:11:6a:79:ab:96:8a:10:69:2c:e4:
2f:1c:38:ef:8c:2a:56:b3:c7:f0:58:e8:52:63:d9:b1:82:10:
27:4a:f1:f4:0f:91:1d:1d:14:7a:6c:49:3c:fb:ce:56:06:e0:
91:a4:bc:61:72:b6:af:57:5c:18:c1:8a:35:96:33:0a:69:cb:
04:86:87:6c:9a:e4:f3:f0:a8:5e:b9:a1:40:fc:5d:95:03:96:
fd:e7:b5:94:ee:ab:cb:5d:8a:01:bc:27:04:4a:67:0f:79:cd:
08:b0:ab:fc:39:03:12:d8:89:6f:72:65:6a:ef:e5:7d:23:39:
d3:33:15:ce:45:a3:60:b2:e0:92:69:a9:49:aa:11:a7:9a:74:
d8:0e:56:52:0d:85:e8:60:b3:1d:3e:27:8f:bc:98:30:c3:df:
13:f9:9f:df:ed:d3:4a:2f:a8:f6:e5:38:3d:16:3f:61:65:91:
96:df:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:40 2025 by rpki-client