Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: 8qj1gTTwcf1Tw+EG8G8+oMRhuR9ITF7Jj1Vjb6EA+fU=
Subject key identifier: AE:5E:56:29:6D:34:AB:45:10:1E:57:4D:79:5A:B6:53:87:DA:87:82
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 0198D5BBF5C2838D3629137C2C894F818C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: k9BiHwM7A6jOcYVFBdq0+a3O0zyIdEn9vFtRt4bHKDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f5:c2:83:8d:36:29:13:7c:2c:89:4f:81:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=ae5e56296d34ab45101e574d795ab65387da8782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:9e:ff:bf:32:8e:68:42:f4:15:7b:4b:ec:
01:3b:cb:ef:43:c2:de:0f:d8:50:ec:c8:80:01:72:
b2:06:14:94:fd:6b:da:4e:08:fd:a1:43:22:3c:cf:
bf:77:66:0a:03:af:fb:f4:30:6a:eb:e5:2f:02:cd:
e8:a0:58:c8:6a:8a:69:4f:81:e9:c5:29:17:b9:81:
25:1c:be:a4:fb:27:0c:bd:e7:dc:ca:26:b2:18:59:
80:29:f8:55:83:64:5d:5d:52:b3:76:3f:68:12:47:
b8:99:50:6d:d1:f1:0b:40:23:56:9d:5e:b5:08:8b:
bf:d5:9f:b6:47:36:cd:d0:c0:e2:cc:96:48:33:d5:
cc:72:4e:33:da:0b:a4:b2:da:2b:be:b3:a1:b3:db:
73:44:2c:42:2d:6b:95:6a:05:ff:e9:14:31:2c:a6:
43:48:5f:6a:cd:a6:a5:2a:c2:c4:f4:3e:9d:01:5d:
33:89:36:c2:5f:bc:90:6f:70:5b:c2:88:ba:ab:70:
0a:f5:f0:7e:c0:49:2b:2b:e5:cd:35:b8:16:54:7e:
a7:26:f7:f3:22:c9:28:53:95:0e:d2:33:44:20:37:
e7:d5:1e:47:df:f2:41:aa:fb:ff:ac:d9:25:27:85:
f5:3e:87:ea:c7:72:7a:85:50:e1:b3:59:ad:24:d1:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:56:29:6D:34:AB:45:10:1E:57:4D:79:5A:B6:53:87:DA:87:82
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:ae:72:23:12:2c:79:36:0c:f7:7e:9c:1f:69:9c:de:4c:
97:00:38:a6:d4:57:61:1d:31:d0:51:08:0d:a7:11:c3:03:d7:
e7:37:b2:35:10:c7:c1:f7:ea:4a:4d:0a:97:74:eb:24:f5:59:
20:6a:18:47:87:e3:b2:d9:7a:c5:5f:32:57:a4:ea:81:95:b6:
22:f6:61:70:9d:5f:3a:86:c9:94:87:a2:61:55:b3:94:8f:63:
72:79:ce:df:c5:e9:94:b3:bf:56:cb:6a:5d:ec:5a:85:e9:b9:
b1:f9:dc:22:ba:58:43:44:41:45:b9:9a:3a:27:82:c2:14:9d:
9b:e3:20:33:72:0a:79:f2:35:21:cd:b9:9a:f5:6c:cd:18:4c:
66:56:74:bc:09:01:98:87:a0:38:fc:5e:a4:aa:9a:e2:2a:19:
97:21:2e:ef:e2:6a:25:f6:95:cd:49:46:32:71:00:b3:eb:c3:
f9:03:f3:de:22:9b:c7:ef:3b:1c:5f:9c:cc:ad:01:8e:66:b4:
ba:02:44:1b:da:71:b2:7f:30:60:2b:a1:5d:72:74:3e:3b:3a:
8c:aa:94:67:28:c9:b9:29:e2:5b:b5:bd:d1:99:53:18:6a:d9:
e7:69:2a:79:6e:b3:9b:21:bc:6e:cc:77:20:58:ab:b9:4e:6e:
20:b9:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:55 2025 by rpki-client