Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: 1dcVM2VgnNtFp2iLjk59K5oEBidUMMkX30CHHg0zqdI=
Subject key identifier: 64:D0:5A:59:D5:5A:65:0D:B8:3B:AD:15:64:D7:A3:55:29:C3:64:98
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0197B88F9740EEEF8BE79CB401472188E948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0D41
Signing time: Sat 28 Jun 2025 22:01:47 +0000
Manifest this update: Sat 28 Jun 2025 22:01:47 +0000
Manifest next update: Sun 29 Jun 2025 22:01:47 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: H1/3lZmIWBJStmnkjyNkc2Dd6wEe8+mcXEgV1bZLVLs=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:97:40:ee:ef:8b:e7:9c:b4:01:47:21:88:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jun 28 22:01:47 2025 GMT
Not After : Jun 29 22:01:47 2025 GMT
Subject: CN=64d05a59d55a650db83bad1564d7a35529c36498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:86:ba:a7:e1:ff:83:6e:16:21:c2:74:7f:
f0:c7:dc:62:f7:3d:c2:a1:c3:87:a5:01:5f:db:71:
f1:28:e0:67:1e:3c:23:df:cc:e9:da:ef:a2:d1:00:
b4:6e:3e:cd:bf:db:be:5a:2a:fe:1a:dd:41:d6:55:
af:c6:62:28:18:fd:f1:13:6e:47:ac:67:55:1b:d5:
f9:5b:eb:90:3d:3f:7d:d6:5b:ec:3b:dc:94:6c:aa:
02:dc:0c:93:1c:b7:1b:bd:90:21:b2:fc:44:92:89:
f9:7c:6b:f6:6f:1d:50:38:da:4f:ad:a4:2d:82:cf:
e3:0d:97:84:8d:e3:29:09:e6:be:4e:24:0f:c1:7e:
00:24:67:5a:73:43:7b:2e:42:2a:3a:de:2f:fe:90:
09:e3:ad:50:c5:af:fe:cc:24:a0:a1:96:68:dc:00:
0e:a8:fa:22:43:7e:d2:a9:3d:af:06:a3:06:59:a2:
39:aa:68:10:ed:74:2b:de:74:0a:06:61:e3:28:49:
b5:a1:04:ec:08:ec:37:ea:b3:d9:5d:cb:6c:77:f8:
f1:c7:2f:80:1a:ec:21:8e:56:3d:d8:8f:f2:7c:25:
25:18:30:2f:c2:a5:1d:2a:73:e9:69:7c:ca:bb:dd:
8d:53:fb:37:d6:f4:b5:04:93:0b:72:09:6e:c4:46:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:5A:59:D5:5A:65:0D:B8:3B:AD:15:64:D7:A3:55:29:C3:64:98
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:77:87:e0:71:fc:f4:35:c0:75:85:b7:ff:e8:0d:1e:19:
ce:3f:fa:10:96:30:4b:95:19:bf:5b:02:22:85:99:c9:f2:b9:
0b:51:1d:db:7d:fc:44:77:a9:21:57:f3:d1:d6:c6:83:35:e6:
a4:3d:fa:4b:2d:2b:8b:9c:1b:cb:b5:21:8a:dc:a0:70:30:5a:
ca:8f:bd:89:f8:07:0b:01:41:3f:12:da:f3:12:f2:6e:d0:77:
4c:b4:27:56:e1:c9:6a:78:98:99:e6:ee:98:d6:41:5a:c6:77:
32:35:e2:cb:87:98:b4:87:7c:16:2a:1e:17:09:6f:5d:1f:4a:
37:f3:24:67:bb:c8:54:a3:b6:d0:48:3e:ea:a8:b2:b0:81:78:
d8:3d:f1:d2:86:67:8e:90:62:33:e0:ac:b7:aa:1b:fe:e5:f7:
8b:4a:33:9d:41:b5:09:61:8f:2e:e8:8f:39:ad:91:26:7d:8e:
61:38:b6:98:ff:e8:0a:af:40:f2:d8:17:6f:33:96:bc:91:15:
d1:73:c1:1a:f1:50:f9:ff:5a:ff:5d:da:54:52:63:13:35:a1:
a4:02:fd:d6:9d:f3:8d:2a:e4:ca:58:e6:5c:41:86:c1:bf:56:
92:08:39:5d:ce:d5:94:4a:0d:4d:b2:b4:9c:af:0e:ba:e2:b1:
41:17:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:34 2025 by rpki-client