Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: AEJrMv+1q/UcueQLoUM8FmoHv0I/xb8B3NPY6SG2RMY=
Subject key identifier: 7F:54:A2:50:90:58:4D:0C:AD:CE:F6:8A:56:A9:E4:27:DB:32:EB:FE
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0198D4A7DCB7993CA07069198E0B87A9F35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1353
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: ScUgNFBMasXIT5/FObnGeSbKuKXay+1ycEuAdGMRAGM=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:dc:b7:99:3c:a0:70:69:19:8e:0b:87:a9:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=7f54a25090584d0cadcef68a56a9e427db32ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:67:69:df:aa:89:b3:da:e5:68:33:fb:d1:
89:bc:5e:f8:f6:6a:8b:e8:5d:ee:01:98:b2:7e:8a:
8a:f5:79:c5:03:91:dc:c7:eb:2a:79:c6:bb:4e:90:
e1:13:44:f2:89:81:d5:ca:1f:45:e3:d7:6d:c7:80:
f4:ee:cb:e1:75:4b:2a:45:12:5f:2f:ba:4e:61:99:
03:48:5a:53:71:eb:15:ff:fc:40:48:96:d3:26:f5:
4c:cc:6c:8d:c8:c4:cb:58:d6:11:a8:fd:5f:2d:ba:
e2:5c:fe:a5:f1:6a:72:c6:58:d7:46:94:44:be:69:
14:0a:8b:29:eb:48:e8:f7:df:df:97:77:b1:e0:2c:
e6:ed:64:ba:0e:63:f0:27:f9:5f:41:4c:03:17:60:
3b:d3:47:43:cf:9f:a3:72:0c:38:ab:f4:61:79:ee:
fb:48:44:97:17:cd:c1:fb:9a:19:20:b1:8d:bd:3b:
d7:4c:27:c5:1a:4f:2e:da:5a:34:4f:95:17:19:e5:
93:27:5e:5c:29:57:96:67:3f:1b:e0:b6:b0:04:bf:
ba:aa:c5:72:9b:7b:e1:70:74:e3:39:cf:a0:3c:a0:
67:c6:33:a7:a4:78:2e:53:36:39:0a:31:49:d7:45:
01:57:59:05:f4:0d:3c:79:8f:01:31:a8:33:e1:9e:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:A2:50:90:58:4D:0C:AD:CE:F6:8A:56:A9:E4:27:DB:32:EB:FE
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:51:dd:05:ad:1f:05:c7:60:de:b4:29:a0:ef:c8:9a:2c:
d8:39:91:f8:3d:cc:46:f3:ea:41:37:ac:d3:1b:1f:70:a1:19:
24:ee:c4:44:32:1d:3a:91:d8:04:f2:31:94:00:aa:a4:7e:d7:
cd:1e:e9:88:43:29:80:9a:58:ea:02:ba:c3:af:43:a9:e3:01:
94:77:68:42:25:81:08:5e:23:cc:29:b2:e7:61:7d:94:d8:9a:
22:c4:9e:74:4e:c0:1a:49:58:8f:7f:a4:43:44:aa:ab:aa:7a:
ab:b1:0b:da:88:6f:b1:ac:ee:7b:20:2f:e7:47:ba:2f:cc:58:
08:58:d8:74:e4:14:b1:6e:08:d8:ec:63:ee:9a:60:9a:0a:ed:
f7:90:86:7f:49:7e:db:3c:f5:31:67:ab:32:71:e1:0a:55:40:
c1:64:08:cc:08:df:d9:aa:b0:08:d8:0f:ca:8d:84:c2:29:d1:
9a:1c:1c:86:af:f0:54:ae:a6:fb:2e:fe:5a:57:93:57:d2:18:
61:cb:70:d6:ab:0a:dd:53:01:bb:23:01:f4:0e:f7:c5:24:55:
ab:24:4a:bb:f5:b9:95:f2:65:68:70:36:5b:d7:15:15:8c:e6:
c2:50:20:ac:1a:03:5a:a3:0f:39:91:96:2a:1c:34:43:8b:bd:
d8:dc:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:02 2025 by rpki-client