Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: 1rObhzGUbbG/Ggf/i/o6KGMrFB5OWWcWtVn7ftEERio=
Subject key identifier: 36:6C:82:05:2C:1F:0F:08:28:B3:60:1F:D1:D8:36:04:90:A7:38:9D
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 0199FBB372120708B1D585239F556175E74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: C7
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: UAr6qhiRqCMlRu5W8iOJdSI0N7iHUP/wzbVwTs9CUbs=)
2: n-Wmrebr6lzK0J6ASQgmm9zQzw8.roa (hash: gSUCEOpCYsWN0Xnm1rGEL1t6dJaB8XsJukmiSO9QmS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:72:12:07:08:b1:d5:85:23:9f:55:61:75:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=366c82052c1f0f0828b3601fd1d8360490a7389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:59:c2:89:27:bb:5d:cc:af:25:89:3c:dd:fb:
c5:c4:db:01:24:0d:e0:c0:f6:ce:15:3c:88:5e:37:
14:89:c9:dd:90:7f:50:9c:a1:71:f3:f6:00:5a:ea:
de:4a:b1:19:23:c6:2c:b1:e0:60:29:d1:8e:b4:56:
17:7b:19:6f:a9:b3:70:ec:45:ec:87:cf:ef:ba:53:
fa:aa:b7:de:8d:3a:2c:71:41:53:0b:e7:f0:bc:08:
49:d2:c4:4f:b0:2c:9e:69:e0:d1:c8:39:c3:5c:bf:
13:d3:3d:e9:c5:8b:f2:85:64:cd:7a:8b:60:cb:70:
f2:17:0f:0b:fe:52:ac:03:75:5b:f1:fd:1b:3e:4f:
bd:7a:e2:74:05:9f:1a:eb:86:45:1d:a2:7b:8c:af:
bd:b3:6d:f0:91:54:c0:cc:6e:6f:3e:28:5b:df:93:
50:8c:03:54:cc:0d:de:7a:92:80:dc:cf:77:16:a0:
8a:5d:0c:26:ce:b5:f4:eb:4e:c5:cc:8c:cd:9f:4c:
6e:9d:b5:60:94:66:9b:72:84:32:41:8c:99:af:9f:
b4:0b:fd:8a:83:72:54:49:c3:d8:b9:0d:01:a9:be:
76:51:08:fe:db:4a:6e:4f:e4:dd:f3:87:0a:79:31:
b1:67:fb:fb:10:af:17:28:15:29:30:3b:b1:31:8c:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:82:05:2C:1F:0F:08:28:B3:60:1F:D1:D8:36:04:90:A7:38:9D
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:25:41:5e:cc:e2:4b:60:9f:48:ce:d6:34:db:89:3e:d7:
64:aa:0f:13:92:bc:5d:59:ae:7a:3d:5d:7b:8c:92:99:08:28:
5d:5b:aa:71:fb:42:28:00:57:e5:9c:1a:6e:b7:53:3a:6c:ec:
47:6b:5b:03:6b:15:eb:63:3c:35:1b:a2:a6:6d:98:d9:28:2f:
d5:60:23:ea:d5:2a:e8:96:97:f9:33:5b:7e:7b:82:0c:0f:b4:
e4:0b:94:ab:22:69:b2:d2:66:76:08:a8:70:4b:0e:3d:00:2a:
f3:34:a8:ea:d1:3b:62:09:34:43:a8:9d:fd:7c:f9:b3:f0:64:
a6:41:58:11:ee:e9:2e:80:7d:ef:3c:53:3d:82:ac:8f:94:e8:
3e:f1:ff:ca:d9:6d:e5:25:6e:77:50:55:22:ab:dd:6f:c8:0f:
58:bc:10:de:9f:21:64:5a:56:46:b0:13:82:77:b7:89:06:df:
5b:bc:af:dd:75:fb:4b:a7:ee:76:64:18:81:16:a1:73:51:59:
c8:c2:60:c9:e2:82:e3:7a:e7:09:56:08:9c:bd:4a:7a:db:de:
95:03:3d:76:f9:86:73:a3:a1:4f:d2:44:ea:d0:bb:86:06:d8:
9c:1a:2c:85:8b:10:5d:01:39:3f:b2:dd:05:be:6f:95:e2:47:
e9:f3:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:12 2025 by rpki-client