Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: JpTIDtPBA19bgtHRWw39rXIgR9Pwr66ukE3Fec1zaX0=
Subject key identifier: F2:FA:25:B6:D0:76:24:D8:58:54:83:C4:44:8C:DC:D3:BB:2F:46:85
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 0197B77C20873766B4DF96CE38A2F8B34EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: wH/rmCogjvH6Fumj9VIf8Uo4PqoGgK6SlXdmSpLyLag=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:20:87:37:66:b4:df:96:ce:38:a2:f8:b3:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=f2fa25b6d07624d8585483c4448cdcd3bb2f4685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:3f:05:24:1a:c3:40:fc:12:92:2b:4a:f8:
d1:17:84:c4:1d:4f:9e:f2:d4:94:5a:e1:f0:40:d0:
88:4f:19:6d:b4:9f:ba:64:6f:b6:cf:35:39:db:47:
67:a3:a9:b7:7e:2a:97:85:b9:bd:68:8b:30:42:25:
e3:72:e0:2d:3e:d3:35:a3:e4:85:da:19:9b:16:cd:
2f:c4:07:70:34:f5:1c:48:65:b4:81:54:f0:7c:2a:
65:f0:37:48:c7:a4:b2:fa:9b:7d:aa:fc:64:32:ff:
42:2c:96:a4:b1:49:cf:d7:2c:8d:fb:b6:e4:7b:17:
c9:0b:a3:5e:fe:7f:81:4d:21:01:f5:3a:5e:4a:ba:
6a:af:1c:a2:53:8a:19:b6:c6:40:8e:ff:1b:6b:25:
87:96:9a:4d:97:2e:0f:34:9b:15:9b:05:99:ba:ef:
73:83:5c:6f:77:ef:50:a2:b6:79:ad:7d:c6:f7:35:
bd:c8:7c:28:f6:83:35:6b:cc:ff:d9:2e:bc:3f:ae:
d3:6c:5b:05:db:eb:34:76:0b:28:97:34:cc:57:33:
eb:e1:a9:17:15:40:bd:b6:83:fc:6a:e8:9f:80:b3:
aa:fd:f7:e1:e7:c5:62:df:29:da:97:ea:68:9d:4f:
65:dd:34:98:65:ed:02:2a:87:91:70:74:61:40:11:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:25:B6:D0:76:24:D8:58:54:83:C4:44:8C:DC:D3:BB:2F:46:85
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:aa:01:1f:0e:a1:f4:57:cf:f7:d8:04:19:8f:30:e6:6b:b1:
da:5b:46:ca:8f:ef:d5:8f:2f:48:0e:72:37:16:3c:aa:38:d7:
89:b6:86:9f:44:8c:86:f2:a2:df:ec:b3:3f:f4:0f:04:45:98:
b8:8b:c3:fd:d5:50:10:8f:5f:cf:a9:cd:6c:05:fd:9e:b2:ec:
78:31:c1:75:92:4e:0d:05:3a:8b:46:6b:55:8f:86:ae:48:8b:
4a:f8:2b:17:82:8c:a6:36:a6:dd:a2:15:57:87:48:87:aa:00:
d7:a9:8b:10:ce:ad:e4:d8:b6:d4:e2:a4:9d:58:be:59:5d:f7:
8d:07:52:96:e2:db:6f:5e:79:db:a2:77:ac:8c:cf:29:2b:e7:
88:33:c7:31:7a:f4:90:8f:27:fd:3b:0c:18:e0:84:cb:ad:ad:
53:5a:7d:ac:51:38:ff:b2:c2:b3:11:8a:c6:d2:09:b3:02:5f:
0a:c0:d2:62:f0:4b:16:f3:35:a3:3a:f4:85:56:00:fa:7c:68:
9f:d3:16:f7:eb:23:0c:09:8b:36:71:57:e7:d0:3a:85:29:a4:
3f:c2:e2:61:ce:0b:45:c0:51:ca:0b:6d:59:50:0e:38:59:45:
25:43:b5:e7:08:85:b0:dd:fe:fa:37:05:d8:33:6f:b4:29:2f:
7c:74:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client