Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: r1i2Vv1NYSjiHbrME+IgAl3GKV9Hycz0NeMiT5j+ifg=
Subject key identifier: 08:2D:47:9D:97:82:2B:E8:CA:9E:63:0C:1F:3B:58:2F:2D:A4:98:5A
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 0197B77C8EE2A1C33467236B69974998A32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0903
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: f0R7tQcUeKgP4DSy9BJ+XvFBgjLQClijnTw7JCxiZ3Q=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8e:e2:a1:c3:34:67:23:6b:69:97:49:98:a3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=082d479d97822be8ca9e630c1f3b582f2da4985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:af:a7:41:c6:bf:52:40:c1:2a:e2:5d:25:
40:6c:7c:6a:20:7e:43:4d:e2:9a:79:83:3b:95:cb:
98:fd:bf:21:60:f3:83:b7:28:4e:c1:0d:c4:6e:4f:
3f:8e:ce:b8:2b:a6:c2:e9:3f:99:6c:8d:41:25:29:
c8:f7:4d:58:3b:6d:85:ee:94:60:c0:66:43:af:69:
ea:ad:61:73:f2:13:6f:de:ca:ad:1d:60:74:bf:d2:
30:8b:41:cb:e9:6b:e0:97:86:09:73:ba:ab:f1:8b:
33:ac:c3:2c:25:0e:d8:67:ce:89:40:03:5a:3d:a1:
21:d7:92:9c:6f:53:31:6a:ca:d9:ff:d7:bb:89:44:
4a:30:80:27:2c:e3:13:14:0c:8b:72:04:df:f2:b6:
be:0b:30:d0:cd:f7:19:2d:1e:61:3b:ae:15:95:cf:
b3:94:5e:ca:ed:e1:0a:e8:a9:77:d1:64:7d:4e:b7:
2f:0b:79:1d:95:29:38:a0:67:76:2c:c2:c9:59:ca:
be:80:a9:05:8a:e4:4a:df:9c:b4:57:70:56:d5:5a:
34:c4:47:97:75:6b:34:3f:a4:72:66:ad:08:80:6c:
d1:45:6f:72:ca:6a:15:eb:4d:69:2b:db:b6:7c:29:
7e:79:f8:52:25:4a:d9:64:b2:71:6e:d3:a1:7e:7f:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:47:9D:97:82:2B:E8:CA:9E:63:0C:1F:3B:58:2F:2D:A4:98:5A
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ff:d2:2b:e3:ca:2d:7f:b0:79:d7:e3:1b:82:f8:a5:83:96:
9a:29:af:0c:a2:3b:8b:8e:21:36:a3:34:78:d0:c6:7c:bd:1c:
3a:ad:91:46:3d:ca:be:e1:d1:0a:ae:0d:05:d2:3c:97:ea:dc:
de:d6:1c:52:95:c5:aa:61:71:4d:a1:11:04:cd:bd:f6:74:d7:
1a:d0:41:41:84:c3:48:62:f9:9a:c8:e2:70:6d:1a:af:e2:e7:
d7:7b:0e:9a:d2:ec:82:2c:5b:0a:f2:5d:5e:73:65:f8:c0:96:
03:d6:58:30:75:fc:24:34:bb:ec:7f:eb:bc:88:04:28:d4:50:
e1:38:4c:5b:6e:4b:09:af:74:44:2e:a9:c7:f7:ce:2c:70:29:
63:b5:63:69:48:52:38:23:e6:72:f6:5e:42:05:98:5b:c0:ec:
c9:4e:78:63:bb:4f:1f:db:8d:ae:e3:87:ee:56:42:4f:9f:69:
c6:f8:99:29:0c:79:0d:e4:65:53:76:40:bd:67:89:d4:e3:2c:
93:f8:46:e6:a0:3b:8c:6d:75:d1:34:02:ad:da:fa:65:8b:47:
be:9b:89:dc:d0:b8:f8:c6:ef:fd:cb:ac:3a:b7:da:6b:d7:67:
9f:36:39:88:42:29:6d:5f:b5:a4:d5:29:e5:64:5a:f6:85:48:
4e:8e:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:52 2025 by rpki-client