Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: jLyefiMOXZk/KY+MvEfSIfUaI4UN9CV4GyHJv7UfhM0=
Subject key identifier: E5:79:47:6C:AB:3E:65:FF:6E:25:B0:26:D1:5D:01:5E:4B:3D:38:A3
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 0198D698108B76BE544C11DF626259EAC081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0C4F
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: CCKx5cR+VaXxMco68MPS+N+myztB74l/5jb7zWPgTY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:10:8b:76:be:54:4c:11:df:62:62:59:ea:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=e579476cab3e65ff6e25b026d15d015e4b3d38a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:6e:8a:b9:3c:c6:1d:78:cf:de:b2:c4:93:
24:c0:21:6b:ff:33:d4:85:0f:c4:64:86:bd:bc:cf:
89:bb:8f:18:a3:a0:f3:a5:7a:75:bf:e4:97:c7:e7:
6a:d8:50:f6:cd:ea:0e:a1:78:98:0a:de:2b:f4:c2:
6f:ac:ac:2c:e1:f6:d8:00:87:b3:69:0a:54:58:12:
70:0c:87:87:c4:b0:35:81:91:be:5e:ef:3c:ef:59:
00:96:cd:52:f2:1d:68:9e:36:65:a5:ac:5d:7b:28:
06:f6:4b:fb:83:07:14:1b:92:5b:be:24:96:ed:fc:
b7:cf:44:c1:fe:70:2c:a0:c9:56:56:c3:df:8e:e2:
b6:f5:d6:fd:53:7d:c2:2b:4a:73:ad:ce:9f:50:c3:
fb:9c:7d:8d:19:94:f5:ba:04:70:77:08:f6:67:b0:
56:2c:7c:fc:da:ca:d6:27:9c:61:42:86:20:07:b4:
20:36:75:30:53:7b:80:f6:01:3a:aa:ca:59:87:96:
fb:43:0c:bc:59:2f:98:9e:63:e3:ce:50:84:9b:99:
b0:6a:07:08:90:0e:6b:d5:81:f6:09:c0:5f:bc:98:
05:f6:f2:da:43:54:3a:10:e2:a7:a6:d7:69:c1:4e:
d8:62:99:a7:f9:2b:fe:69:dc:0f:0e:f9:ef:6f:52:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:47:6C:AB:3E:65:FF:6E:25:B0:26:D1:5D:01:5E:4B:3D:38:A3
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c1:8e:2e:bc:5b:52:3f:92:1a:9a:bb:e1:5a:72:f0:bf:ff:
ff:8e:f0:91:a9:bd:68:65:d9:3f:d7:22:5c:a1:5e:61:af:d3:
36:b7:63:b6:b7:ef:62:15:37:e5:cd:0e:07:eb:b0:e5:e2:49:
77:a2:97:9b:4f:4f:58:7d:75:5a:81:25:36:86:43:83:7b:96:
53:00:82:ea:eb:d5:25:29:1e:43:fd:59:60:f5:0f:09:50:b0:
5d:2d:83:6f:7c:e6:f9:23:aa:b1:d6:54:f3:d8:fe:cc:50:42:
20:f2:90:52:cb:58:16:b2:4c:88:7c:1a:f3:d4:93:32:2c:31:
46:0e:45:5f:37:2b:86:47:47:64:57:1c:e4:9c:6e:d0:82:20:
97:50:65:d6:4e:0e:fa:8b:ad:96:d0:b1:f3:c0:92:2b:e8:76:
75:ab:f3:42:9f:9e:72:13:e2:20:3e:5d:84:ad:95:50:2f:cf:
3e:e7:fb:28:f3:ac:d1:fc:37:c0:06:27:f6:34:68:55:b6:c9:
50:1c:fd:03:9b:ed:e8:6a:ab:f7:8c:46:48:2a:03:e9:c7:57:
b7:eb:b1:58:71:b8:33:c7:81:b7:d4:c7:1a:15:05:e9:94:a6:
eb:5e:ee:df:c1:53:ba:3b:6c:39:ef:ef:8c:a0:db:f8:2a:ee:
9a:df:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:20 2025 by rpki-client