Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: ZlVArYByeoo9Yta5C+VC2HDlnC/OSQt99HDMD0LvFME=
Subject key identifier: FF:8C:EB:25:78:E6:4C:7D:7B:FF:0E:05:D0:9B:24:5A:DD:E9:3A:30
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 0197B6A0AD545417F04F8A474598534F6254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0AF0
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: JjICmXEWiyKpTgbBm80QTpfYWih9Spt/ntqeb5fUlIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ad:54:54:17:f0:4f:8a:47:45:98:53:4f:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=ff8ceb2578e64c7d7bff0e05d09b245adde93a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:24:08:6d:bb:cb:28:13:c0:cd:5f:e9:a8:
9d:ea:7b:ae:01:2c:54:81:0c:b8:ab:d6:d7:23:79:
d2:60:df:cf:63:5d:d3:44:b2:6f:52:70:6b:1a:92:
a9:17:72:17:ca:e5:1c:a8:98:cd:28:63:82:47:25:
76:7f:4b:89:96:1b:0a:74:7d:25:c2:3e:cf:74:10:
93:a3:d4:18:c6:c4:8c:1b:c1:91:17:0d:df:0a:dd:
af:f1:19:fe:3a:d8:16:fe:f0:01:6a:e2:71:df:36:
97:53:a6:e5:0f:99:d2:3c:e8:3e:b0:c0:79:52:74:
87:bc:a0:78:bf:ec:cb:d6:28:fc:7a:76:ff:ad:6d:
71:b3:0d:cc:08:75:d6:db:ee:29:5e:15:f1:9a:0e:
17:2c:97:c9:6e:0b:37:84:cc:85:df:a7:ee:3f:58:
70:32:5d:81:df:cc:59:83:07:73:63:3c:9e:c8:28:
b1:1d:2a:ea:7e:9d:b2:e2:96:7b:20:ac:31:8e:be:
85:7a:3f:95:25:4d:16:bb:8d:8f:06:d5:0a:fe:bf:
5f:0d:0f:ed:b0:06:ba:b0:f4:3d:b0:3e:ab:0c:c5:
b9:30:46:70:bd:13:51:31:fe:a6:2d:a5:53:67:71:
b2:71:35:24:77:3f:37:a2:e4:aa:11:b6:c2:5c:a9:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:EB:25:78:E6:4C:7D:7B:FF:0E:05:D0:9B:24:5A:DD:E9:3A:30
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:c3:9d:df:41:57:76:fa:35:19:ab:05:e6:34:4a:6c:5b:
15:98:f2:63:63:42:66:56:05:5e:92:44:9d:50:d4:66:7a:4d:
78:e4:88:04:7d:d7:09:ec:b1:2f:3d:e2:86:36:2f:c4:a2:dc:
77:28:22:72:eb:be:d2:a0:ee:22:8d:00:18:94:8d:2a:b8:79:
ac:50:e6:59:fb:87:77:4b:2b:c6:2c:26:5d:76:b9:cd:03:cb:
32:09:38:12:75:a1:70:1b:b2:f2:72:67:d8:7d:50:a3:f0:39:
5f:db:c1:09:6e:f4:f0:b1:55:93:92:a7:13:48:76:28:8e:03:
88:36:88:c7:53:85:e3:dc:79:e2:cd:8e:1e:31:32:4a:16:dd:
8b:80:4c:df:cd:21:5e:81:f7:fb:2a:f5:12:f6:85:80:73:32:
d5:48:8b:37:f7:da:23:1a:d5:81:da:9d:b0:1c:22:40:1e:48:
5c:5a:7e:ce:08:0a:96:76:f3:19:ba:10:6b:45:e8:cb:62:8c:
af:c4:45:a9:90:dc:20:4b:e9:32:ef:4f:0f:53:10:e7:48:d5:
35:45:61:7e:5e:92:15:e5:18:24:71:81:23:a2:11:2c:3c:23:
5c:bb:d3:3a:ba:45:75:a4:f7:00:eb:4c:6f:7c:52:64:d7:44:
bf:90:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:18 2025 by rpki-client