Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: avZ9yUatLS+D52Z6lF6MckhJiMaYyzeocyA4bJvuGug=
Subject key identifier: 2C:1B:41:16:4C:31:9C:F9:B4:C9:DF:B2:22:11:57:3A:0F:9E:94:77
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0198D66007D342A082642D6D43E951822ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0DD5
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: b1ZGlDXU8TCPZ+f/33VZ+5fAawcCC7Izga4r9E+Iqig=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:07:d3:42:a0:82:64:2d:6d:43:e9:51:82:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=2c1b41164c319cf9b4c9dfb22211573a0f9e9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:4f:07:22:72:f1:24:76:b7:41:69:9e:14:
60:6f:96:3e:7c:6c:81:c4:ef:f9:1d:ec:3c:b0:41:
9b:46:ab:66:ae:cf:c4:97:ac:37:27:74:81:fe:be:
b6:6d:5e:7d:60:2e:a9:67:b2:a7:7d:00:be:ca:fe:
03:47:bb:69:77:66:2f:02:e6:d0:31:1b:a6:fa:ff:
0b:54:68:59:6f:f5:f0:cb:9b:2f:3a:df:14:11:7c:
05:d2:67:c8:0d:3a:0d:bc:e1:81:9f:6f:63:68:41:
6b:4c:7f:05:7b:79:f3:0d:25:68:92:71:9e:78:f6:
01:90:a2:c7:23:a8:a9:67:50:9e:16:86:93:15:1d:
50:1e:47:5d:5e:e1:b3:04:0e:eb:0b:22:97:8a:d7:
99:3c:f5:ae:cd:18:f2:29:20:16:77:2f:18:49:e7:
4e:66:f3:8a:3d:69:90:12:ff:2d:37:e4:28:8f:07:
4a:6f:46:51:4f:0d:e1:2f:6c:6b:08:87:2d:1b:e0:
46:66:58:07:2e:2c:f5:06:30:ae:c9:70:42:3d:05:
84:15:94:cc:1d:e5:63:56:d9:10:eb:ce:c9:ca:a2:
32:7f:41:b1:3f:dd:7d:cf:55:97:69:18:4c:ad:4e:
dc:0c:ce:4d:d6:da:08:68:dd:4e:7a:6a:d8:fe:00:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:41:16:4C:31:9C:F9:B4:C9:DF:B2:22:11:57:3A:0F:9E:94:77
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:96:ad:66:c9:e7:4e:4f:ef:14:36:a9:66:2e:7f:16:54:
f8:00:f3:b2:51:29:ca:ca:c3:43:1b:b0:b4:eb:84:13:4d:57:
2d:4e:d4:4f:f0:83:a3:5e:91:0a:8b:7c:28:00:9f:2c:2e:98:
9e:fd:cb:ed:66:60:80:3e:65:04:f8:ba:c0:ba:98:0e:c7:06:
e3:2d:cb:c8:38:3b:e0:c8:c4:45:6b:6d:27:af:33:9f:f9:60:
7c:e5:03:69:bb:b2:33:52:85:97:d7:b6:94:06:00:71:8e:dc:
33:66:b6:49:1c:e5:f7:ea:88:7a:23:5c:5a:51:98:8d:dd:12:
5d:57:85:1e:10:be:5d:66:74:d5:98:59:34:9c:92:81:a1:44:
fd:9b:0f:15:3d:5c:09:59:aa:62:d0:58:9f:62:dd:af:b4:91:
1f:32:3b:3e:13:e6:6f:a4:c0:24:2b:c3:87:37:81:80:17:bc:
7c:0e:62:93:5f:0a:fa:53:df:76:51:74:10:3a:12:17:d5:ff:
e9:cb:1c:14:56:08:2c:31:a6:6a:01:8e:03:09:e3:40:c7:fa:
95:84:b2:5c:7f:6a:fb:98:86:e5:ea:fc:d7:1d:36:29:03:85:
54:df:bf:f6:f0:46:5a:5e:e1:f6:f7:23:28:3f:70:22:47:6b:
a0:aa:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:23 2025 by rpki-client