Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: +XGvjICZV4GNLeONZKzvvKC7bU92EG8E77miB0iNqTU=
Subject key identifier: 8C:91:CB:BF:C9:F3:5B:F5:AA:D4:52:01:12:7D:E9:2F:8B:B3:C7:48
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 0198D54E39F4B167602CF39A53764C06DFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0997
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: z4JfbCB8O0WWOC2G5ECt6IRHIi3JI/xPPsjTjkypJZY=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:39:f4:b1:67:60:2c:f3:9a:53:76:4c:06:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=8c91cbbfc9f35bf5aad45201127de92f8bb3c748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:f5:8b:ae:6f:0f:95:27:ac:7e:0b:b3:f9:
f5:ae:67:b2:02:0a:52:01:f8:a6:16:4e:60:8f:38:
96:f1:4f:62:c9:b1:b6:5c:fe:62:68:43:6c:b4:ae:
88:42:cf:a3:63:6f:3c:d6:2b:aa:fe:bd:09:2b:39:
9f:20:60:44:23:8b:93:5e:bf:87:13:d9:d9:1f:f6:
61:02:0f:8a:1f:5c:d0:2d:b4:0f:4e:fb:8d:85:64:
3c:7f:8a:40:32:a7:db:ed:3d:8c:83:1a:cd:b7:bc:
e2:a7:7c:d1:17:59:00:be:d0:c5:be:f4:4b:7f:d2:
d2:ea:5d:d6:66:b4:42:6c:9d:4b:80:8d:08:58:52:
e7:f1:2c:72:13:85:81:dc:29:49:98:93:b9:7b:71:
b5:f9:d6:79:bd:a3:ca:40:5f:68:39:a6:88:7a:1c:
06:8a:e4:a2:7b:ce:17:a1:6e:fc:26:22:cc:ff:dd:
83:a1:13:5e:35:0a:81:29:67:cc:76:a7:fc:54:3f:
5f:20:32:38:d4:20:8c:42:6a:52:35:0c:b8:c5:5a:
59:10:87:6b:9a:87:9b:7d:9b:bc:79:1f:74:6d:cc:
25:e4:50:1f:1a:f1:30:20:b8:48:86:c3:e8:08:ca:
79:12:7d:91:32:0c:64:5a:41:9f:cc:a7:bc:64:47:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:CB:BF:C9:F3:5B:F5:AA:D4:52:01:12:7D:E9:2F:8B:B3:C7:48
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:14:a7:ad:52:22:6d:b3:75:e5:52:42:c0:fd:4d:27:2a:60:
35:78:66:bb:e0:92:2b:65:a7:10:4e:db:02:1a:e2:96:e1:24:
d8:8d:36:9b:e4:7e:47:5d:7e:4e:2d:cd:c3:7c:05:d1:4e:23:
91:a1:a5:31:c1:0d:62:da:8a:ec:52:c1:05:3f:0c:a8:d5:c0:
56:c7:f1:e6:8c:7f:35:1d:41:bb:5a:62:c4:bb:00:73:c5:fd:
c5:ae:ef:92:ad:01:a9:71:d3:35:ee:f2:3c:25:e3:c9:12:89:
6d:19:d4:d6:a7:f1:52:c0:04:f0:a3:54:ee:de:9e:6b:af:e3:
bb:2c:67:1e:ec:7b:7f:35:62:de:9d:b0:32:9e:1e:a4:4f:58:
d3:99:6c:17:d0:c7:23:d8:3d:b4:27:64:10:09:0c:a7:35:6c:
ef:37:2b:68:17:9e:21:53:a1:7d:03:70:ce:82:b9:cc:58:2a:
92:ee:cd:a3:a9:4f:70:5e:e9:ba:45:d0:6a:5b:e1:da:13:f2:
ff:4c:9a:78:16:ba:56:6d:dd:20:36:73:72:fe:3f:ea:cd:1c:
a3:4d:e4:ab:0a:ad:fc:9d:2f:db:1c:7a:b6:a9:ef:86:b2:75:
ea:43:2b:d8:ba:01:cb:80:14:3b:c4:69:c7:5a:3d:33:0e:58:
b1:75:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:40 2025 by rpki-client