Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: 7WJZ2mNnMkQi6AV3PUxcQ7HW0MMOh+WvVkRhjy9b1Jo=
Subject key identifier: 0B:50:15:5A:54:0F:03:85:F8:A2:B4:13:E8:4F:83:3E:6E:C0:F4:26
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0198D6611951B2C119FF3EA16CF3F3EA05B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 0563
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: gm2iMCr7B1LpjCoCPceUldwLSbqM0PQMPdPRLnO0dE0=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:19:51:b2:c1:19:ff:3e:a1:6c:f3:f3:ea:05:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=0b50155a540f0385f8a2b413e84f833e6ec0f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:fe:fe:5d:62:78:38:dc:5c:a9:63:01:fe:
29:b5:d4:30:ac:b6:ca:13:78:8b:cc:d7:6a:8f:9f:
72:86:0b:01:84:d8:77:41:ad:61:2c:b1:d4:f2:81:
26:c4:1b:75:e9:f0:17:52:98:2a:1c:79:67:9d:df:
5d:86:a6:36:5b:8f:64:ba:13:7f:d4:d1:c3:db:a7:
04:fa:07:17:6a:fe:5c:e4:c0:53:4d:e5:be:37:d3:
d6:c8:8f:95:27:3e:43:13:fd:47:64:78:c3:05:f7:
62:0d:cd:db:4e:73:a6:19:bc:08:a0:5f:b4:7f:85:
f0:d8:ad:be:7d:7f:9c:71:a6:01:53:24:9f:1e:af:
96:34:aa:a9:23:8c:0f:36:c9:e4:b1:d2:84:8d:15:
e3:a0:a2:60:e7:31:5c:1c:d1:d9:d6:6e:46:92:64:
04:4f:5b:45:48:01:dc:e0:01:bc:bc:17:ac:e9:a0:
a9:aa:bc:78:eb:3a:ed:09:12:b9:69:9e:39:a7:7f:
24:c0:ea:b4:29:9e:8b:9e:ef:89:f5:83:34:b9:37:
f6:e7:20:d0:42:49:ff:10:a7:2f:d3:02:b0:7a:46:
98:33:f1:ca:df:e6:54:c4:12:86:1d:9c:b4:fc:de:
80:a2:f4:45:5d:0c:1c:7b:bc:97:a7:d3:6d:9e:e1:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:15:5A:54:0F:03:85:F8:A2:B4:13:E8:4F:83:3E:6E:C0:F4:26
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:4d:46:9a:4d:fe:00:5d:ad:bf:2e:85:46:00:ee:4a:ca:
93:2d:d3:08:7a:14:dc:b8:a2:ac:f9:4a:f8:9e:db:29:ab:52:
d4:64:52:74:d8:6c:0f:da:7f:43:f6:72:8c:28:cb:af:c5:56:
af:2d:db:d3:34:0c:b1:38:18:3c:c6:d9:6c:15:91:be:0f:e7:
52:1d:f0:5f:19:32:66:a0:1c:37:8b:7d:8e:7a:bd:c3:82:b3:
ca:8b:9f:0e:b2:18:5d:62:49:54:37:a9:a7:2c:f3:34:30:be:
2e:71:e8:c9:c0:70:c2:42:7b:9a:1c:37:24:0e:e6:59:b1:be:
d3:ad:f7:e7:76:0e:6a:ae:9c:f8:24:08:dc:58:a1:ce:14:4f:
bc:95:bf:f9:04:3c:3b:af:c7:71:c4:19:e9:b3:ae:5c:f3:ad:
5b:b4:22:18:88:15:8a:52:9e:6e:ed:35:7c:b7:7c:df:8a:ce:
55:c2:03:0d:ae:3c:32:8e:e2:6c:47:c0:26:2c:94:d8:6b:7d:
2c:3a:69:15:81:25:53:f9:d9:29:d0:43:df:d2:07:68:69:9a:
09:31:47:e7:d2:9e:0c:e9:23:47:9a:94:04:43:60:a0:c1:ee:
13:94:2e:14:76:6a:22:19:41:d0:77:75:ee:81:18:88:84:85:
4a:10:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:46 2025 by rpki-client