Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: iDPRq2irhsfkS8rLWFCakpntKzd+l+mwsoIbEt6RW6E=
Subject key identifier: 1A:E5:AA:1C:3D:FB:DC:88:C4:8E:63:7C:82:DF:32:FC:4C:5D:4C:E1
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0197B8FD2D58C75275866A1F1BF392A6C431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 0223
Signing time: Sun 29 Jun 2025 00:01:29 +0000
Manifest this update: Sun 29 Jun 2025 00:01:29 +0000
Manifest next update: Mon 30 Jun 2025 00:01:29 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: x8JuFyi2nc6nazCx21xPUz4/YoXlXUN2Cd/nuUkXM0Q=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:2d:58:c7:52:75:86:6a:1f:1b:f3:92:a6:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Jun 29 00:01:29 2025 GMT
Not After : Jun 30 00:01:29 2025 GMT
Subject: CN=1ae5aa1c3dfbdc88c48e637c82df32fc4c5d4ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:92:d0:a9:73:d5:b3:7f:72:5c:b1:e0:e0:
a7:0d:a6:aa:33:81:d5:2d:52:d6:f9:51:bd:47:36:
6e:ae:aa:a6:50:e3:e7:a4:1e:16:0e:48:e5:a6:b8:
5f:7a:2c:35:87:94:82:78:0b:39:7d:fe:e5:17:4c:
1e:67:7b:bd:92:7b:b9:8f:a9:27:fa:e9:9e:38:4e:
c2:48:0d:1d:bc:64:30:cc:4d:df:0a:fc:c1:c2:9c:
15:57:a3:bf:69:fc:a5:2e:4c:a5:29:7b:c9:28:cf:
03:5f:28:b0:8f:18:ed:f8:c2:56:f4:8c:44:31:cf:
db:84:a6:2f:d6:0a:18:5d:93:fa:64:a9:78:d1:de:
87:40:dd:2d:40:03:2d:eb:15:14:16:18:29:2e:62:
48:6b:7b:87:e9:4c:c5:74:23:a9:67:c8:50:86:06:
0f:13:6d:7d:42:7a:bb:3e:a2:dc:8a:02:af:5c:09:
08:3a:c8:47:ad:22:49:fc:28:d4:e2:7b:2d:d4:58:
bd:94:75:52:5b:e9:75:f9:7a:59:30:82:11:17:51:
b9:bd:43:30:f5:d9:89:5b:33:e1:0f:43:94:ab:2c:
21:66:53:e8:6f:89:db:23:2d:2b:fe:d6:22:cf:18:
59:0a:d8:11:a1:74:a7:e9:a8:28:a7:a9:1d:e2:37:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:AA:1C:3D:FB:DC:88:C4:8E:63:7C:82:DF:32:FC:4C:5D:4C:E1
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:87:33:db:38:1f:26:14:5d:7a:bb:cc:30:c7:b8:3e:8e:
61:26:85:ff:3c:f5:2d:0a:2f:f4:97:20:0f:92:81:09:eb:9a:
a3:19:23:07:51:33:12:ed:bf:0b:58:d2:bf:bd:d5:28:c2:98:
20:cf:15:ad:39:cd:13:fc:ca:93:b6:12:f6:d2:b9:43:53:1b:
56:f4:be:3f:cf:28:34:87:ef:61:a3:8a:a8:48:99:70:18:1c:
ae:63:f1:e3:00:f8:aa:20:bd:33:f8:3f:0b:a3:43:5f:22:bc:
48:1b:b9:bf:fa:30:5f:03:2f:8f:e5:05:a2:c4:61:63:7d:f4:
9d:00:c5:35:51:73:1e:ba:a6:d5:43:29:7a:e5:4c:6e:c0:83:
eb:fb:86:7a:18:09:a2:88:42:1a:5a:1d:d6:e1:ea:0c:64:5c:
16:e1:c2:68:8f:ee:4c:eb:75:ec:77:6e:58:51:65:ca:fb:4a:
ef:7e:31:21:ee:7a:c3:c0:4a:5e:55:ac:80:23:9f:d6:8a:aa:
a1:6f:e0:00:3f:60:9b:31:59:ae:75:44:39:86:94:95:5e:87:
b6:fc:be:13:50:db:89:33:40:89:eb:1a:87:0e:fa:8d:c3:79:
88:2d:25:31:e4:fa:12:3a:12:8c:82:dc:ea:e9:ab:a3:02:0f:
df:cb:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:24 2025 by rpki-client