Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: pbN67Ct6a4DlrUeN1fIzy7rXtRwWnrQ6MQSwXaWgA5Q=
Subject key identifier: A9:D7:48:E4:65:B0:38:16:47:1D:BA:9C:01:A5:C8:CA:2C:A3:7F:7D
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 0197B6A04E9339F9E4EF97E9EAD240310C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 13BF
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: HRhUP0YxPkKtm0jK2nOrJDSDSrRmrPhj5roKcV3c3l4=)
2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=)
3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4e:93:39:f9:e4:ef:97:e9:ea:d2:40:31:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=a9d748e465b03816471dba9c01a5c8ca2ca37f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:d9:44:00:5c:ce:5a:97:50:69:17:66:1d:
69:8a:ef:dd:44:cb:c3:7e:99:56:7b:b1:b5:a8:47:
c6:0b:3e:17:b5:c6:60:ac:3b:fa:e5:16:37:7e:1d:
b2:3e:ad:e1:20:39:2e:08:2c:d7:aa:79:77:ca:cb:
10:27:34:76:28:42:6d:e0:26:74:9b:a6:6c:cc:9f:
48:6d:89:a7:50:45:ea:ea:8e:06:18:e6:59:ae:00:
f9:da:ab:bc:85:33:b8:2e:da:7c:58:f8:55:87:df:
f0:a4:80:30:cb:76:e5:99:0d:ee:08:8c:04:91:d4:
b9:b3:59:61:0c:09:f9:a2:b2:07:cc:27:59:69:c5:
ef:95:ae:00:14:ee:4b:24:73:b7:3e:78:41:06:c7:
95:e3:7a:4d:ca:6e:8a:7e:a2:ce:94:01:44:e0:8e:
ac:82:ff:11:10:a0:2e:3b:6f:05:6c:d0:c6:77:2f:
fc:68:aa:6e:0f:5e:19:d1:86:c6:35:ca:24:22:82:
29:a3:00:62:8d:b7:d9:8f:2a:b3:59:d2:3f:83:11:
a6:f9:e1:77:95:a6:6c:72:62:56:2e:51:ae:b3:36:
aa:91:20:b9:5c:17:9e:be:d4:33:38:b7:fa:67:45:
73:83:db:83:25:3c:7f:88:63:bf:ed:39:22:8a:0a:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:48:E4:65:B0:38:16:47:1D:BA:9C:01:A5:C8:CA:2C:A3:7F:7D
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f2:b7:97:a7:f2:11:c1:5c:46:43:fe:9e:34:af:02:d4:7f:
fb:c9:06:32:63:64:89:07:d7:8b:b2:99:b6:88:4d:9a:b2:0b:
ea:96:b8:81:80:d1:a6:94:7e:94:24:a9:be:37:81:03:0c:ed:
ea:b6:c6:b1:fe:20:66:e7:50:f7:05:ea:49:46:b4:f4:77:74:
91:82:ab:83:0e:ae:37:7a:80:b6:4f:8d:e6:3b:d5:93:47:fd:
bc:a3:ca:48:e5:33:f7:7a:51:55:c5:aa:ed:bf:a6:85:b7:6d:
74:0a:52:33:13:23:1b:d5:cd:9f:c5:a6:bc:b0:e6:10:5f:6a:
19:3c:3e:26:07:41:8c:cf:9b:4d:52:63:35:33:57:e4:f6:a8:
9f:37:be:b5:5c:4e:e0:92:c5:d9:e5:a3:25:9f:5f:71:ec:3d:
86:e4:75:bb:b8:42:4c:3b:f7:6d:ee:49:79:5e:f5:15:f4:55:
f2:5f:47:5e:a2:34:c9:52:4a:78:9e:1f:5d:f7:36:6e:dc:49:
47:6f:37:e3:a7:e8:e0:04:4e:50:37:72:40:c9:92:dc:83:be:
3d:dc:93:8e:52:43:a1:c2:11:52:93:7e:2f:d7:b4:d1:d1:cb:
3d:ee:58:9c:0d:2a:93:bf:61:63:08:a0:4a:88:40:bc:97:d9:
f4:0c:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:40 2025 by rpki-client