Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: 5Yvh6qoJkyc7LKA901sxg0YlW0im6o9iU9+VMXzaQtc=
Subject key identifier: E7:55:E1:E2:5E:49:E0:D2:B5:B0:AD:E4:01:78:4A:92:0B:38:3E:1B
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0198D4E0A71F4DE412017A96746C4404A9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1427
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: q8ezHhWl04pPseAkyz9z7ZH6sYN5Q3auCHdJCatXUhc=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a7:1f:4d:e4:12:01:7a:96:74:6c:44:04:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=e755e1e25e49e0d2b5b0ade401784a920b383e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:61:6b:2a:0a:fb:bc:83:a1:f9:8b:b3:32:
50:6e:aa:c7:c7:3e:7a:9e:c9:3c:d4:f1:1d:64:4f:
8f:cd:14:e0:8a:a3:4b:9f:2b:20:d0:34:c8:d1:19:
24:d9:10:0f:ae:ef:af:47:3c:63:ca:04:43:47:22:
d8:a4:a3:d3:be:f4:b7:bc:f0:c5:63:94:39:26:3e:
77:dd:51:9d:1d:bd:07:f1:68:f3:16:a2:c7:19:3e:
16:ef:d5:0e:6a:0f:71:4d:21:35:9b:b1:b5:0f:ae:
60:76:0a:ba:a4:62:88:0d:3b:85:82:98:9b:8e:c1:
be:19:6a:3d:d0:0d:db:cc:ef:7b:b6:4f:4a:69:2f:
21:0a:09:77:a6:95:37:91:6b:88:99:56:df:4e:10:
b9:4b:ce:f5:49:f5:66:8c:4e:3b:54:e4:2f:73:84:
f0:4b:0d:2b:9d:8f:6d:fc:8c:bb:34:dd:d7:c3:3f:
c4:d7:4f:ed:f7:44:a8:14:0d:e9:45:e3:4b:32:05:
bc:40:1e:cd:ce:ca:54:d1:93:9d:ab:0c:21:f5:32:
6c:a6:49:5b:92:c8:2f:2e:f5:62:0b:08:10:2f:fd:
b0:3f:77:39:5e:18:1d:06:e6:91:14:c8:08:08:db:
91:9a:43:07:23:af:03:a8:b3:02:b6:c8:63:2d:b9:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:E1:E2:5E:49:E0:D2:B5:B0:AD:E4:01:78:4A:92:0B:38:3E:1B
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:86:d3:9e:95:36:e7:9c:4f:9b:ca:78:bb:31:5a:6d:b3:d2:
53:4e:c8:01:fe:47:be:9a:03:71:5f:ac:0e:98:17:01:43:48:
2e:7b:a2:15:ee:5e:4d:e9:96:e3:e8:b1:99:d1:30:d3:0b:5a:
a4:27:f3:83:e1:7c:f4:33:4a:df:22:8d:94:bf:8b:14:ca:31:
dc:95:2a:bb:ed:7d:85:10:c2:0e:c8:0c:bb:e1:d3:71:d2:be:
f4:5c:d4:e9:bc:2a:0c:9f:0b:2e:40:3d:a0:d9:5d:f6:f2:45:
40:b1:53:72:6f:74:57:dc:de:63:f1:9a:7f:1d:35:3f:c3:9f:
0d:c2:16:86:ce:17:28:2f:15:a6:c3:3f:7e:29:72:f7:3e:ff:
06:77:4c:c4:a6:ff:cf:ae:8d:3f:c1:d8:a5:a4:9f:2a:57:3e:
f1:7a:d3:49:2a:d9:cc:17:78:1a:26:44:8d:14:c9:4e:3f:93:
18:7a:42:54:3f:ad:a7:fe:df:1d:36:55:33:df:08:1f:bd:e7:
03:ec:09:c4:2a:c1:f1:62:bc:e9:28:61:66:8e:a6:d9:37:09:
91:90:6b:ac:86:64:fb:92:89:e4:de:ed:70:be:8f:01:8a:03:
df:89:5c:44:2f:55:cc:fa:c8:d2:20:a3:5a:fd:41:22:12:41:
a9:f3:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:47 2025 by rpki-client