Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: H/FZvArZGvP8pj4qWy6N0ln8aUJy3dSOcnHcunzIehk=
Subject key identifier: 52:E4:15:3D:02:C7:72:71:9F:00:1E:AF:AB:F3:C5:8A:CB:D8:35:BF
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 0198D515F0B6C7FD228A90B643C20B9C36BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0981
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: OYQgtaJm2jjssuFAz9xwmwy2mYmLQ6HI3Q7U5sNl3Y0=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f0:b6:c7:fd:22:8a:90:b6:43:c2:0b:9c:36:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=52e4153d02c772719f001eafabf3c58acbd835bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:7c:6c:a8:f8:30:bd:93:3f:f5:66:74:30:
51:3b:4f:4e:38:6b:95:31:2a:9b:49:d7:8d:fc:39:
49:cf:81:b1:b4:95:fb:78:b8:7c:7f:4f:87:79:be:
0b:97:90:75:35:06:f4:0c:7a:47:8a:e5:1a:8d:4a:
56:a5:f5:37:d6:fd:b4:4a:a8:a7:96:ff:56:67:dc:
15:c7:a8:ee:80:fc:16:cf:90:c1:1f:29:c0:b7:fa:
8d:77:c8:75:96:d8:13:34:90:02:c0:8c:04:5b:5a:
7a:a0:a5:30:8b:8f:8f:92:d3:8f:5c:a1:57:d0:7b:
c2:5f:c4:cc:9b:21:c8:ac:09:52:35:9e:60:08:5c:
36:ba:14:80:fc:2e:15:d0:c8:37:c2:1c:6b:50:99:
b7:4b:d8:6a:c1:38:fa:77:31:aa:03:90:09:65:0a:
f0:41:c6:7a:49:d0:e2:6c:52:ef:b4:ab:60:77:15:
51:dd:b0:ea:f7:ff:cd:41:31:f1:6e:28:ac:e4:99:
1a:86:45:29:fa:cc:bf:28:2b:9a:e6:2b:d0:1e:25:
ec:85:90:5f:c7:89:14:15:48:6f:2e:c3:9a:af:32:
60:00:8d:8c:45:34:73:1e:4a:ac:77:93:86:a5:a3:
a6:70:54:fa:cf:08:cb:70:ba:74:34:0e:b8:cd:58:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:15:3D:02:C7:72:71:9F:00:1E:AF:AB:F3:C5:8A:CB:D8:35:BF
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:27:fd:4b:61:98:73:ce:98:05:49:5d:f7:32:b3:4e:28:
6a:08:24:86:0c:97:42:44:59:00:e3:bd:57:60:ba:eb:2d:d2:
16:1f:28:1a:68:d1:93:9d:c3:27:c6:b6:9b:05:30:02:81:8f:
47:7c:ec:d7:86:fd:11:ce:13:6b:fe:75:42:92:51:f0:2b:03:
82:e6:f9:ca:74:3f:ff:db:3f:47:9b:b3:8c:05:c9:fb:17:2d:
d1:b4:86:ca:fe:28:11:da:f0:de:9c:2e:38:ce:de:be:9c:af:
49:6f:e2:68:e4:24:6b:80:cd:bd:fe:9d:9d:f6:7f:75:da:69:
1b:f8:7c:b0:21:5d:b0:52:19:11:9a:90:64:51:e4:c0:a4:af:
21:55:85:02:d3:64:00:22:86:84:36:ee:5d:81:c2:52:d0:86:
72:aa:bb:ea:3d:d4:f8:12:e3:74:9c:57:51:4b:36:26:f5:4c:
b2:8a:7f:d8:44:a7:c4:78:cb:31:48:c9:55:30:66:60:77:24:
7c:a1:9e:3f:8f:52:13:ba:e0:d5:27:a5:cb:b8:97:37:9c:e5:
87:8e:c6:db:80:f5:61:f9:5d:68:c6:34:52:2a:81:4d:8f:43:
a7:a1:1f:20:f8:b6:40:ed:72:04:69:6a:1d:22:a6:fe:45:3f:
61:26:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:31 2025 by rpki-client