Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: f1x7q9RqbaruoT/23MqBjGcc5IqxlFe4xon5J1Tr5JU=
Subject key identifier: D0:B2:51:93:F9:FD:A3:25:BB:F5:21:4F:06:8E:4B:8C:9D:36:89:6C
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 0198D473141C7D4853BDA3D97811A08B0904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: QCzisFwzKSmSzQL5+utR3zzfgiQKnHekAo75SSUqzjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:1c:7d:48:53:bd:a3:d9:78:11:a0:8b:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=d0b25193f9fda325bbf5214f068e4b8c9d36896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:66:dc:76:56:22:fc:ba:a0:ec:c8:20:30:
e2:14:a0:b8:36:45:5d:a4:b1:2c:54:d0:4a:2d:7d:
5f:19:23:30:6f:e0:f8:0d:2e:cd:db:25:23:6b:af:
18:01:b1:ba:85:c9:8b:00:79:94:9b:cf:ef:71:5b:
51:01:c0:8c:db:fb:ea:6b:bb:1b:16:3d:17:1c:d8:
81:df:70:9a:68:6f:e6:3f:27:fd:53:7d:72:a7:de:
c8:cd:25:b3:23:77:57:5f:5a:70:92:35:4c:ac:49:
a2:41:1b:09:ba:e4:19:ac:e7:d2:1e:05:5e:07:36:
89:b8:c1:58:8d:e4:3b:a1:4f:21:c3:32:21:28:a5:
8a:f6:02:09:24:6d:5f:02:17:45:ab:21:d3:e1:b2:
d6:50:86:b7:51:f2:f0:00:de:d6:a2:45:e0:86:da:
81:ba:0f:53:31:3c:01:a8:d7:1f:f6:68:ab:ae:5d:
52:be:db:e1:e7:b4:1f:9c:8f:db:b3:a0:65:47:28:
21:91:e8:7f:c6:6a:84:99:33:7a:95:4a:9b:fb:bf:
e6:8a:c7:d2:92:39:c8:c8:f9:10:f3:2c:b8:8e:18:
94:83:e7:05:ff:49:35:36:26:ce:66:66:b4:0e:83:
c6:da:e6:ae:0e:46:b9:07:71:6f:50:38:23:4f:ac:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B2:51:93:F9:FD:A3:25:BB:F5:21:4F:06:8E:4B:8C:9D:36:89:6C
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a2:85:0e:4d:4f:25:9b:89:26:09:f4:a0:90:02:76:9d:21:
82:15:3c:f6:e1:03:6d:b0:26:7d:d0:14:9c:c0:c8:43:f4:e1:
4b:65:97:ab:81:d4:89:64:81:4e:79:ee:1c:94:b4:de:6e:2f:
46:8e:1b:52:1f:5e:9e:6f:47:96:e8:f1:02:88:8f:f5:c8:26:
c6:7a:14:e7:60:2e:93:5e:a7:d8:79:81:4e:0c:f4:3a:95:7a:
42:03:0b:24:18:e7:14:c4:7f:a8:7e:71:8a:12:b4:08:bf:a1:
13:b7:8c:9f:9a:c6:f6:62:11:e8:ca:76:d2:da:8d:44:6a:19:
68:16:d8:ab:1e:e2:b5:22:27:f7:b8:f1:e3:a4:11:9a:1b:ce:
20:4a:4a:cd:28:ac:cc:02:df:48:56:35:99:a4:ca:a6:36:be:
75:31:1b:33:4f:e9:2c:fc:d2:49:7c:25:dd:46:7a:c1:91:ae:
1a:a5:99:02:0d:c8:6d:5e:77:ef:93:ae:74:c7:02:51:86:7f:
c2:ca:15:3c:99:ba:d0:01:57:ec:92:eb:35:e1:21:f5:2f:3f:
c7:fc:de:c1:d6:b9:b7:65:0d:8b:3c:ab:fd:b9:71:69:ef:ac:
e8:32:c3:8d:42:05:41:fe:03:66:e1:b0:26:8e:a4:e9:11:97:
19:f6:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client