Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: GN4urutIkoN+Wa3Nv2YfNPEnTQE2LDrFWslFS39tti0=
Subject key identifier: 5A:87:2B:D9:E2:76:63:08:97:77:E8:E2:BF:A0:1B:B6:78:20:2C:84
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 0198D6297D6709ACCDA4E82396D2DA47E5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 2F
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: qvM7WfUWH8MAgHgJyOMhW7cPihnd1Jm52uF+vyJDkzI=)
2: n-Wmrebr6lzK0J6ASQgmm9zQzw8.roa (hash: gSUCEOpCYsWN0Xnm1rGEL1t6dJaB8XsJukmiSO9QmS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7d:67:09:ac:cd:a4:e8:23:96:d2:da:47:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=5a872bd9e27663089777e8e2bfa01bb678202c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:07:88:d5:7b:51:f1:b7:8f:d5:3e:4c:a9:
4c:1f:6a:f5:42:1c:b0:cf:bc:12:2d:cd:44:df:0f:
27:29:eb:f6:e5:af:17:af:ce:76:d1:a2:28:d8:ef:
cf:f4:03:45:8d:bf:12:3b:53:fd:60:fe:31:98:7a:
5b:58:3a:bd:3d:ea:e2:17:13:cc:e7:86:4b:04:c7:
7d:d6:66:bc:92:b1:b8:d6:57:be:c9:5c:06:d0:58:
13:08:b5:72:d1:51:08:8f:7a:28:ef:c6:8b:10:b9:
e2:3a:3c:3f:d8:a9:ed:46:ad:80:a9:2d:a0:f2:d8:
21:35:1c:36:ec:01:9f:8a:f2:ad:8c:31:2a:df:3c:
db:b5:8d:3a:9b:dd:f5:e4:22:7a:c2:99:98:14:f9:
96:40:2d:74:9d:09:f9:14:7c:7c:b9:48:0a:96:d8:
8d:ef:f4:0d:c9:35:66:2b:c2:b4:a2:c0:cf:b6:f0:
ff:1a:b0:af:22:85:78:8b:a5:70:65:ba:e9:c8:e0:
fa:cf:49:24:c4:73:43:37:4d:08:cd:cb:88:dd:c5:
1a:d4:cd:8d:d5:39:7b:00:f4:c0:7b:75:e2:92:4e:
dc:99:a5:84:a6:ef:63:28:65:67:0d:0a:1d:a1:26:
97:dd:f5:56:dd:65:1a:07:d6:e3:63:2b:f3:9a:b9:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:2B:D9:E2:76:63:08:97:77:E8:E2:BF:A0:1B:B6:78:20:2C:84
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:3c:45:0e:6f:5a:8f:7b:bf:23:5b:17:88:92:5c:66:9e:
21:48:31:66:29:71:2f:45:d1:cc:1c:e5:5a:05:81:ca:39:60:
9c:bd:d5:98:fc:22:42:90:36:40:b5:9d:6a:a4:74:ce:a1:5b:
b0:5e:ca:46:cc:5b:0b:84:1f:85:66:5a:d3:a6:9e:32:92:a5:
2f:31:f0:9c:f5:a4:37:fb:c1:45:75:b2:a9:53:98:23:57:5e:
a0:83:a6:ef:29:6e:f5:28:d4:31:dc:74:88:56:9b:40:7a:00:
17:fe:3a:34:39:dd:cb:32:d3:f1:be:a7:f8:95:f8:1f:a2:64:
1d:9a:be:95:b2:af:1e:ec:a5:ff:12:54:eb:7f:47:10:d1:e5:
c4:db:63:cc:75:2e:f0:1b:1a:ee:43:bf:54:e7:10:7d:e7:53:
17:5a:d0:ef:13:4d:b8:39:32:a8:53:4a:4c:44:cd:26:42:5f:
f0:0c:7e:3a:d8:40:73:4f:0d:29:40:7f:39:93:00:43:1c:08:
7b:fd:22:1c:7d:ad:45:27:15:74:9f:b1:4e:d7:c1:1b:d8:8f:
eb:33:e4:48:e6:2b:d5:b6:78:7e:0a:94:cd:a0:82:83:9f:9e:
5c:7e:22:a7:5f:0c:bb:4b:a4:67:5a:ec:eb:03:ed:12:3b:85:
3d:a4:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:06 2025 by rpki-client