Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: WCkQxBAf8kqqkTlu6VZBkuy6YoWRDmRU5UradNKflyc=
Subject key identifier: 58:47:97:AC:DB:FA:70:A6:FE:EA:F2:AF:A4:56:F6:7E:BC:79:F6:06
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0197B6D77D072BE296028115291A72B48BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 12BF
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: yP9TnL9Aq7cEcPmv/gouHowkTDE+tizwWfLWQI0ISQs=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7d:07:2b:e2:96:02:81:15:29:1a:72:b4:8b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=584797acdbfa70a6feeaf2afa456f67ebc79f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:fd:f0:20:c2:2a:7a:43:3d:d7:3a:24:3e:
e1:2e:30:15:3b:3b:2a:3f:30:cc:63:20:f7:96:aa:
9e:e7:3e:4d:0c:e5:2a:6d:85:81:4b:eb:6d:44:4c:
fc:66:79:3d:82:19:82:6b:bf:07:05:22:b8:24:68:
0e:7a:bb:c1:18:65:30:d0:67:84:a2:85:77:87:92:
0a:57:93:e1:f6:41:46:19:dc:0e:1a:a1:00:35:ab:
23:51:d9:72:d1:da:8d:7b:b3:f7:ad:e2:1e:d4:3c:
d8:81:cd:60:39:d4:e9:a7:79:1f:6b:11:4e:ff:e5:
f6:7e:90:f3:75:4e:03:b9:ae:63:4f:59:94:8d:fa:
e0:43:28:9d:b3:48:29:03:a7:26:99:ae:53:76:ad:
d2:f0:1e:ef:06:e9:c7:7d:c9:ef:3c:d4:37:4e:22:
37:3e:44:f5:20:80:28:27:e6:6c:14:6b:cb:9a:c1:
85:3c:ed:bc:fe:94:50:4c:45:ee:29:d6:cf:ea:a2:
54:f8:5f:5c:6a:6d:10:e8:de:a6:59:0a:bb:4b:23:
30:e2:58:01:7d:56:e5:ce:e3:b7:da:aa:65:9e:fa:
39:d2:ac:f2:40:3e:b6:6b:58:62:a8:e6:18:fb:c3:
35:f8:8c:a3:eb:41:42:7d:12:17:0c:2c:8f:af:ee:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:97:AC:DB:FA:70:A6:FE:EA:F2:AF:A4:56:F6:7E:BC:79:F6:06
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d7:35:21:42:a0:3d:d7:4d:24:52:1a:67:05:e0:37:ce:de:
69:4d:00:5d:8f:01:fe:af:d1:4a:e0:33:32:0f:e2:08:b7:e0:
0c:f1:a8:bb:e2:49:51:16:6c:56:15:dd:19:16:84:67:be:25:
e1:82:2b:17:d9:8a:16:ee:8d:66:aa:f3:62:13:bf:98:b9:95:
5a:dd:99:0c:98:a8:af:b0:ce:35:75:63:55:88:52:7d:9a:b6:
39:cd:e4:9a:7e:29:db:8b:0b:5e:4d:7e:94:8d:56:a6:04:0d:
f4:2e:18:7e:66:04:55:a1:49:7b:eb:83:31:a7:c5:fd:ae:29:
15:b6:56:60:06:79:07:98:58:91:fd:9e:81:c0:9d:b3:45:58:
a5:07:73:83:38:99:d5:e4:82:bb:06:24:64:c4:d2:98:57:81:
65:28:be:06:b7:c0:47:6c:ae:7d:50:c7:21:39:46:b0:56:25:
42:9f:2a:10:52:9d:e5:81:43:1f:6e:e6:bd:42:04:81:ae:ab:
73:d9:2e:ef:04:9f:67:54:a7:83:83:73:a5:4f:eb:98:85:ff:
b9:96:b5:77:cc:cf:51:06:89:77:ca:93:05:8b:78:45:2d:87:
3d:7e:1e:e6:bb:3e:38:2d:59:ed:cf:6f:68:b7:ac:10:a8:d5:
7f:78:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:36 2025 by rpki-client