Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: BPigBDac3UJS+DT7DCGJZ4Y5zpKg0bRzvXsVt/QkYPU=
Subject key identifier: EE:E5:3A:A2:60:23:36:2E:31:E5:FF:10:7C:19:BD:59:C0:39:F4:23
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0197B6A24C7385DA920A1C6FB177A5B50B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 04CE
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: GmbB66mTdkc+DsWdBb8WwQ7+nSuEznBYjUlojAn8N1g=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4c:73:85:da:92:0a:1c:6f:b1:77:a5:b5:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=eee53aa26023362e31e5ff107c19bd59c039f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:73:3e:be:33:95:25:cb:3a:be:b6:31:c9:
48:b7:0c:b9:f6:d1:09:e0:96:fc:34:6c:3f:2c:a5:
99:1f:eb:b7:5a:d5:7d:5a:56:41:ad:0f:ca:ca:55:
fa:e3:af:17:68:6c:be:19:51:07:8e:8e:7d:87:ad:
0f:c3:af:99:63:23:25:cf:18:f5:bf:23:d0:11:b9:
91:62:9c:39:0f:fb:b1:84:5b:27:57:aa:90:b0:51:
a6:a5:b6:23:96:24:b2:a1:0d:3c:e6:92:43:5a:f5:
59:aa:da:45:8f:40:89:38:2d:46:17:ef:95:68:f9:
d0:a2:8f:1e:f9:48:42:d2:c7:8d:2a:27:e6:e9:87:
7e:61:84:9d:25:89:89:ca:a3:e7:bf:e8:b2:59:06:
7b:40:b8:6a:38:c7:b7:46:62:e9:41:d9:57:be:73:
f4:8e:72:90:9d:cb:1c:fa:73:62:d7:d1:b7:d2:31:
69:ad:82:4d:ca:d2:68:86:91:29:38:3b:b4:7e:28:
38:48:15:22:6f:54:c7:9e:69:e8:0e:c0:f5:48:26:
46:75:73:cf:dc:46:75:19:2b:d9:b9:9b:7d:86:30:
1d:58:86:17:ce:ee:21:03:93:be:36:36:71:bc:fb:
c3:7c:02:cc:a9:6b:23:d4:b5:54:f5:24:5c:30:fc:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:3A:A2:60:23:36:2E:31:E5:FF:10:7C:19:BD:59:C0:39:F4:23
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:fc:2e:c4:bb:76:4a:93:f4:8e:4c:33:f7:13:bc:fa:e8:
80:4d:67:e6:52:75:5a:80:45:67:12:bc:4d:37:4a:23:99:da:
87:3b:ac:12:1f:11:39:e3:f4:22:89:35:c6:54:44:bf:78:57:
a4:0b:04:8b:cc:82:fa:c4:61:d4:86:ac:7c:88:83:04:28:e6:
ba:fd:53:49:55:7a:32:77:56:f7:3f:f6:1e:48:01:83:ac:ed:
62:c4:99:80:db:5e:ae:ae:dc:51:47:7d:1c:74:6c:9a:ad:92:
68:0f:73:fb:dd:d3:2c:99:92:6c:58:ad:27:a6:38:43:95:78:
b6:a3:2a:ae:7e:a9:58:ff:34:25:42:a7:f2:6b:29:85:2e:ce:
0b:2d:69:ff:34:9a:65:1d:e9:60:9a:14:a7:3d:88:47:24:07:
c8:e0:0f:88:28:57:24:93:28:87:df:e7:6e:31:44:dd:10:88:
d2:a6:3f:5a:77:b0:1c:f0:ce:12:90:01:e2:be:ed:05:3e:db:
2b:d8:bf:01:3c:a3:c5:e9:d7:78:90:b6:cb:aa:f3:95:98:37:
53:a3:9f:24:d2:6e:cb:11:4a:4f:19:af:5f:a3:2a:ab:dd:b4:
14:19:b6:6d:6d:64:84:ac:a5:0d:88:32:23:ee:d4:c6:34:e9:
23:ef:7a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:33 2025 by rpki-client