Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: 3qMnzSvPXO1zZSa0KtmcrddH60saC6FMZpdJKyX7ULY=
Subject key identifier: BF:9E:39:16:94:B0:42:82:38:19:D5:3F:C1:49:CD:29:45:5F:02:11
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0198D5BBAA32F72C8DE86E8B39EFEB84CA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 1089
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: y0/OvU9FT6MyMKINzO8/gkTg2E87rBmcUyF2oBMWkB4=)
2: SgVaw9dGiBaOyFrQoF1dUXR7CDI.roa (hash: OI5adqW3SJrMIQGjIhmdYoxARRioxuyzaVULjGuGLRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:aa:32:f7:2c:8d:e8:6e:8b:39:ef:eb:84:ca:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=bf9e391694b042823819d53fc149cd29455f0211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:47:1f:08:0e:87:97:c6:c5:bb:fb:1a:aa:
cb:ea:b2:31:32:af:22:e1:be:20:5f:e4:cc:6c:99:
9c:50:3a:08:3d:e0:fe:33:e9:9d:08:ee:ab:68:75:
03:46:3a:d4:b0:86:44:19:84:3d:26:54:13:5b:e5:
cf:50:58:dc:de:0e:f1:23:0e:59:a0:20:4c:d5:87:
a5:a5:99:71:d0:e2:50:70:b4:49:fc:ee:32:87:52:
e0:66:10:30:f8:9f:9e:d2:b9:53:8e:02:6b:3d:62:
af:33:c1:d5:14:cd:ce:f5:fb:d0:41:bc:46:84:af:
af:27:21:4d:5d:7b:50:e4:d1:f0:6b:c2:d4:fd:ee:
72:e0:17:57:cf:08:08:cb:ea:11:80:ef:75:cd:44:
0d:f8:0f:52:89:b8:09:fa:df:30:fe:e1:22:78:45:
cc:3c:9b:3d:e6:4c:34:f2:65:1d:92:76:37:a2:90:
34:7a:0c:be:84:54:a8:ac:3c:0c:9b:9e:df:b3:93:
31:b6:b8:0b:6d:2b:03:f4:c9:7c:61:1b:5f:02:18:
61:02:88:33:53:2a:65:71:44:96:eb:4f:32:9e:c1:
35:de:c7:40:60:1c:52:57:a5:2a:83:81:42:33:39:
1d:fe:b9:da:68:42:cd:a7:0b:44:1a:f2:00:6f:90:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:39:16:94:B0:42:82:38:19:D5:3F:C1:49:CD:29:45:5F:02:11
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:13:68:65:b2:89:a3:5b:a6:c5:8d:c3:86:62:c4:4e:70:
39:ee:95:3b:2d:97:d7:9a:2f:1e:55:83:12:ad:db:2d:65:53:
7f:43:ba:95:73:57:03:0b:64:bf:92:e3:67:c8:08:f7:f0:02:
8c:ab:26:d0:e6:e3:88:6d:ce:d9:22:e2:a2:10:67:d3:df:c5:
57:18:d8:63:5c:56:8d:de:7d:e4:b5:87:9b:08:d9:3a:b9:42:
c8:f5:47:35:1c:c5:48:d8:a5:a4:f1:4c:d6:7a:0b:b7:dc:30:
ed:48:bf:60:b4:6c:e3:54:47:d4:90:d3:e1:ec:2e:6b:d9:49:
2d:5a:ea:d3:ce:20:fc:f7:6b:6f:b0:48:97:7c:39:7c:15:43:
e4:72:fb:6d:ce:61:83:62:cd:98:5a:8d:38:4f:55:5f:e7:12:
0d:be:49:ca:c1:3f:3b:07:3f:e2:ce:6a:9f:5a:97:84:00:01:
a8:fb:47:c7:0e:4e:8f:dd:61:4c:b1:01:12:c1:7e:bc:19:e8:
d6:20:28:ad:a3:06:ab:36:8a:ff:0f:51:73:79:f0:b3:64:ba:
ec:96:8a:1b:34:2f:7f:5e:06:6e:1d:e5:e6:6c:31:a0:91:67:
ea:32:33:db:87:f4:83:49:d1:32:5d:ef:fc:96:6d:12:c0:a9:
89:ab:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:28 2025 by rpki-client