Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: MwXqPaOEhLoCEvIbzW8mXKLAL+iYMpqOGOnNxe2bBDo=
Subject key identifier: 41:BA:A0:64:31:7F:75:E5:31:0E:4B:99:8E:E9:38:0F:F0:09:11:C7
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 0198D473E55A613A42BB4A62524E698D23D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 1453
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: htma2Q9SzGne0wfoQ3P/hCIASzkzoVS58LJoJzH7p9M=)
2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=)
3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e5:5a:61:3a:42:bb:4a:62:52:4e:69:8d:23:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=41baa064317f75e5310e4b998ee9380ff00911c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:4a:4e:94:4d:a2:cb:3b:96:f1:db:4e:f9:
fd:04:7e:ba:bf:4a:ca:e5:73:7a:19:0c:48:a0:30:
4c:1e:1f:de:32:1b:e8:44:a6:8a:86:ea:73:9d:b1:
33:5f:ac:05:d1:85:12:49:27:37:6c:ef:a1:ea:4f:
82:97:98:14:9e:4b:d1:37:d5:d6:25:12:68:6b:7c:
61:a9:83:1c:16:07:29:8a:1a:74:70:0d:f9:c1:1a:
40:d3:d2:ad:cd:a7:79:1b:bc:78:ad:9b:f8:ca:8c:
65:ba:db:41:75:68:67:f0:4f:1d:5e:f5:33:73:7b:
72:03:bd:ce:69:03:38:b0:f6:16:b1:3e:71:ac:d6:
3f:d3:db:7e:bf:63:06:d6:5f:ae:4d:d0:58:be:8d:
69:dd:68:a8:07:e1:5d:f7:4a:87:3a:9f:59:7b:05:
c9:b2:fb:10:a4:06:51:1f:23:73:b0:f1:90:ff:95:
aa:0d:7e:b8:41:f7:e2:15:14:e1:53:05:ef:1f:80:
fc:76:9c:70:cc:51:9e:4f:61:dd:76:a3:2e:ed:cf:
db:2f:c3:22:63:6b:58:9d:75:65:7f:f8:61:38:12:
20:f2:7b:fe:3c:f8:12:4c:53:ca:65:b5:08:d0:1d:
7d:ad:5e:bb:f0:30:80:89:75:75:94:8b:11:e5:e6:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:A0:64:31:7F:75:E5:31:0E:4B:99:8E:E9:38:0F:F0:09:11:C7
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:9c:d3:89:d2:83:a2:97:72:a1:77:4e:a9:13:52:28:42:
5d:cc:df:8c:81:25:97:2e:9c:b5:84:22:ac:1e:03:2c:7a:b8:
80:2c:00:2c:91:26:25:71:d4:01:7f:5e:8d:55:56:9a:09:ee:
c1:dc:1b:9f:3d:2c:45:49:cb:da:c9:01:d5:3a:3c:1d:a9:9a:
49:01:ab:27:c0:4d:a3:ca:b0:ea:69:cd:a3:4b:13:13:dd:42:
0b:85:8f:44:ee:d7:b1:d8:2e:63:2e:26:4d:65:21:13:4a:ea:
35:01:26:ca:09:32:ed:13:5c:5e:a8:2c:5f:20:fb:73:70:59:
2f:2c:3d:23:c5:85:57:3a:24:6e:43:45:3b:21:87:9d:a1:9e:
10:3a:39:96:a1:32:b7:ad:fc:a6:03:7a:e0:6b:66:01:6e:70:
56:6e:88:10:4b:9a:ea:e9:3a:1f:ba:91:1b:32:c8:86:2c:27:
c8:27:a2:8e:d4:b7:80:3d:e8:38:d0:58:98:ed:8a:f5:3d:b0:
77:15:4a:2a:e5:76:82:d4:5c:8e:c8:91:82:3b:9c:1a:68:79:
be:9a:0d:4d:32:ce:56:cb:76:a6:f2:7c:73:f1:75:a4:9f:dd:
0d:f8:73:c8:dd:5b:d4:f2:5e:bc:f0:49:6b:31:45:05:ef:bf:
65:5b:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client