Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: bm/omHWJ+zABhsEFkLxl5WyvvT//293Ai9rdUGIS8Vg=
Subject key identifier: 8B:88:DF:A6:53:16:DC:EF:11:6A:46:A0:FC:A5:28:B5:0E:0E:78:E6
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0197B820E38B93BB0DA414A0877C4D068091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 0FF4
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: NPPZ1XSzvK/ngQBRauezGRNA9q6HPcEo8QUH7gjfKVw=)
2: VujtY7H_gm-rimsabFgd1S_Wzb4.roa (hash: LJsG/sKpKfqvPPgnoMQJf8dj2kvx8RJGuxIDjxxsbGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e3:8b:93:bb:0d:a4:14:a0:87:7c:4d:06:80:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=8b88dfa65316dcef116a46a0fca528b50e0e78e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:72:fc:74:d3:af:4a:ba:fc:7d:20:90:c0:
48:1e:c6:6a:e0:7b:3a:06:2f:c3:17:2d:12:11:eb:
98:cd:2a:63:68:30:24:4e:19:8b:f3:26:8c:f2:28:
71:32:0c:4f:dc:12:32:d8:c9:b7:79:06:0f:d7:8d:
67:0a:b5:16:ed:f6:b5:45:43:c8:01:38:79:d5:40:
14:aa:93:0d:84:07:75:06:fd:12:5c:d5:9d:e1:27:
2f:a9:f9:55:75:de:ec:b8:88:02:46:a0:18:73:f6:
09:58:10:3b:48:f0:7d:ba:98:44:26:38:c7:92:e7:
b6:de:ce:2c:49:8e:1d:a2:9e:61:04:5d:cb:f1:d1:
63:67:e1:60:aa:0b:78:ea:84:d9:29:07:19:22:b3:
65:27:3d:1b:90:5e:be:98:b1:3e:3c:a5:d8:12:56:
5e:9f:a4:c2:cf:e6:3a:43:85:40:19:97:29:f8:da:
3b:df:da:ae:9c:98:0a:46:90:73:84:8b:9b:b4:9e:
69:97:09:08:ac:3f:fb:f2:48:0e:12:fc:4c:56:f7:
5e:bc:0a:48:fb:0f:c8:d8:fc:84:1e:15:fc:db:99:
c1:b8:09:db:bb:be:c5:5f:f6:c1:3d:8d:a2:15:30:
f0:be:8a:e4:de:2f:d5:68:f8:ca:4e:f3:11:44:ce:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:DF:A6:53:16:DC:EF:11:6A:46:A0:FC:A5:28:B5:0E:0E:78:E6
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:67:68:b1:2b:2d:57:e1:ce:d8:84:28:18:95:e4:16:f1:
ac:1f:7c:5d:0b:d2:fb:77:fb:aa:2e:ec:5f:38:91:58:d1:77:
c1:4a:4f:24:5e:e5:d0:2a:a8:8e:12:f4:58:b3:66:f5:06:60:
27:af:cd:30:9c:d0:46:db:4a:58:ca:1d:71:28:c2:ef:0d:71:
b5:9a:bd:16:3e:f7:b9:00:ec:2b:dd:e4:3e:51:df:71:5d:b0:
0d:3b:c7:74:e1:a2:10:7a:eb:8f:bb:76:99:29:73:0f:e1:83:
b9:5e:28:ff:8b:89:93:e1:bd:9b:59:dd:89:49:14:92:86:6a:
f9:16:12:32:2f:32:01:61:a9:7f:51:5c:f0:b6:4a:ae:e0:e3:
37:0a:ee:c1:04:b7:33:64:de:e0:43:59:e3:a7:99:86:c2:32:
0e:8c:ac:93:25:60:37:5f:e6:f1:99:11:78:09:68:70:6d:11:
72:b1:c7:72:b1:15:93:09:94:f9:77:7e:3a:44:be:23:cd:2e:
fd:4d:8f:03:94:6b:a1:8e:8b:86:92:a4:73:92:28:78:16:4c:
01:fa:94:f5:67:97:47:d0:81:a1:d4:74:92:f4:55:9f:5d:d2:
e9:91:82:34:97:30:56:10:7c:b7:9b:07:76:cb:61:5f:9c:c6:
02:26:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:46 2025 by rpki-client