Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: WAtlgX8mGlC5YwQDAcgfeH3eNeqH0HSLO+3wlbc2K44=
Subject key identifier: B8:CA:6D:E7:EE:EE:72:64:2F:E5:00:85:66:48:08:83:CB:16:3B:D2
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 0198D7A95547F5E588661BC70D8F5601EA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0F59
Signing time: Sat 23 Aug 2025 16:00:55 +0000
Manifest this update: Sat 23 Aug 2025 16:00:55 +0000
Manifest next update: Sun 24 Aug 2025 16:00:55 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: Dfcog9v9fUJXK81I3xvEhlnjLJ92j+nnjFi1HaVcvP8=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:55:47:f5:e5:88:66:1b:c7:0d:8f:56:01:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Aug 23 16:00:55 2025 GMT
Not After : Aug 24 16:00:55 2025 GMT
Subject: CN=b8ca6de7eeee72642fe5008566480883cb163bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:80:ee:3b:4e:99:27:a0:86:7c:9e:9f:32:
17:5e:4a:9c:61:0c:a1:5a:6a:5f:04:38:0a:d2:b9:
dd:8f:fe:6c:0e:c8:9f:86:b4:30:02:5c:b4:3f:81:
9a:be:bb:ea:c1:f1:d4:4d:69:1a:43:8a:09:e1:a5:
76:80:f5:80:1f:6a:e0:1b:07:22:59:99:7c:79:f0:
cd:ca:49:2f:dc:a4:15:2d:3e:09:0a:9d:a2:9b:78:
51:6b:7c:71:25:37:e7:f4:3d:c7:73:85:48:21:d6:
ff:c4:73:b6:ad:f8:8a:08:17:89:d9:4c:b2:8f:ea:
db:22:9c:16:41:47:4b:51:50:54:08:62:bf:2d:81:
5f:3c:8c:9a:b5:9a:95:11:10:7a:ed:6f:fb:01:bc:
4d:af:14:ae:4a:65:e0:06:2e:30:99:ea:3b:dc:8c:
52:d3:ad:2a:e2:a8:9a:57:d0:7f:0f:55:63:6f:34:
f9:ce:00:8a:99:0f:b2:33:62:3c:43:01:7e:52:01:
b4:03:ce:1f:fa:c4:3b:6e:30:9d:e5:d9:a3:19:f8:
12:e3:c7:0f:c2:11:83:be:63:62:75:86:4b:1c:c8:
f0:97:33:5a:d2:ba:51:a9:ad:72:09:8d:af:32:68:
c5:ad:70:c5:e5:d5:1b:84:13:85:b9:c3:db:8a:99:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:6D:E7:EE:EE:72:64:2F:E5:00:85:66:48:08:83:CB:16:3B:D2
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:60:12:38:f6:58:7b:b5:65:f0:d1:c2:5c:bc:d1:5b:fa:
f3:51:02:4e:ca:26:92:bd:14:9f:9f:b1:05:e9:92:93:0e:1c:
49:19:99:d8:1f:e7:ac:98:01:14:3c:5c:1c:c4:49:a4:48:1e:
c4:60:22:c9:08:b2:a0:7e:d3:32:77:4b:05:15:52:8b:af:89:
cc:f0:00:4b:f7:db:02:a6:a8:e5:34:73:da:8c:d4:ee:c9:1d:
55:be:97:ce:b2:5d:13:22:91:75:95:0a:53:b7:12:14:c5:4a:
54:9c:17:9e:21:c8:c5:91:8f:12:6f:6e:84:01:90:9b:21:42:
e8:03:9c:26:25:5e:e6:07:07:e6:b5:2b:61:63:50:ab:23:c0:
3e:79:95:35:e7:53:b8:84:cd:59:a9:12:49:a2:af:fd:82:e4:
d7:be:b2:b2:12:93:f5:08:ca:04:ad:5c:4a:47:ba:75:5d:84:
94:93:bf:54:b3:86:b9:65:34:e4:6e:6e:ac:34:52:63:8b:fc:
24:d3:43:03:36:07:92:16:15:0e:01:cc:75:b6:e4:5a:97:2e:
4e:cd:2a:37:52:5b:e2:c6:04:3d:b2:83:fa:48:72:aa:9d:44:
63:3a:42:6a:f1:cf:13:42:e8:01:ea:2f:b4:69:70:85:51:8c:
b5:c1:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:53 2025 by rpki-client