Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: QqBYmJkMpTbKRBE7Qmsmg75h4C7eGr3o6fWXjNGqQ5Y=
Subject key identifier: EA:AF:C4:CC:DA:B7:51:6B:6B:FF:0B:1E:61:DC:04:0F:29:3F:9C:BE
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0198D6983D2E4E9B607C1646DB7F78FA5C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0A28
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: X1BUOrJewBY7HGsrewE6SQQCNCU0CuYDASdTenpmxjc=)
2: URjGhFursZ-Xj8pdWi1TJTjrqwg.roa (hash: rj0lONsdMyEx7NS5wD8pesT6gLWyuS0FDSfkDIpjiaU=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: s8_NtbGTu8kgBV4HuDM2-AUVj2Q.roa (hash: E+MCsmGddUOCxHp7ENUlFyd8Du3D6Rxe6k6mioQYpr4=)
5: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3d:2e:4e:9b:60:7c:16:46:db:7f:78:fa:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=eaafc4ccdab7516b6bff0b1e61dc040f293f9cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:3c:f2:60:76:1d:f6:5a:94:2c:64:55:7b:
09:0d:5e:5c:22:d9:ca:d7:32:19:b0:c2:d8:51:32:
98:5f:5e:46:f8:02:3a:0d:73:92:59:60:d3:af:d2:
95:10:70:0a:a4:4d:79:a3:fb:15:87:90:93:29:5b:
bc:d0:b2:32:ab:f7:dd:5e:d7:e3:7d:75:1b:2b:eb:
bb:44:91:7b:b6:c1:2b:29:3b:eb:f9:59:37:02:97:
08:b7:3b:7e:7e:e3:6a:d0:a7:5f:2f:f3:2a:85:5c:
0b:7a:17:20:8e:98:11:c6:e5:67:9b:43:22:c2:b8:
dc:e5:8f:20:57:89:b7:9e:dc:8d:3f:88:8b:8d:70:
3a:56:97:c2:54:11:73:d9:dc:68:e6:3d:41:3b:79:
02:a1:cc:c8:88:5e:ca:da:9a:c5:23:54:72:98:26:
9e:fe:0a:7a:49:29:f7:12:38:b7:49:5a:7d:bd:76:
bd:e3:3f:2b:3f:ab:d4:9f:16:0a:bd:40:55:03:15:
de:00:4a:bd:69:a5:e7:71:d9:37:40:bf:8b:da:e0:
18:14:4e:03:de:78:d5:a4:f3:c2:71:a0:c8:10:3c:
58:ba:23:0b:ec:e7:00:bb:39:7e:da:89:e4:42:2d:
f8:e8:f2:9e:dc:5f:d0:2a:22:8f:f9:9a:24:3e:2c:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:C4:CC:DA:B7:51:6B:6B:FF:0B:1E:61:DC:04:0F:29:3F:9C:BE
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:16:62:4e:f6:0b:9f:db:48:bb:92:94:64:1d:82:c7:87:
fb:db:1e:ca:ea:af:ab:a8:6b:be:ad:fd:2a:da:39:75:93:1d:
ab:9c:b2:63:06:ab:62:63:10:ad:7e:9b:c0:3f:4a:b8:d6:f5:
44:46:55:ec:57:86:f0:f8:53:51:ed:f0:e0:b0:46:05:9e:90:
4f:29:b4:9f:74:a2:27:ad:d4:5a:1d:d1:f1:d8:83:0e:5b:5f:
dd:76:d4:90:e7:ac:62:00:07:ee:2b:b7:9d:a2:60:e4:b6:2f:
29:c9:20:09:49:c7:e9:eb:0a:03:f3:eb:be:ab:2b:63:28:85:
a1:0f:ca:a3:d7:48:70:35:f1:b9:91:d4:ec:da:84:c3:1e:f1:
b2:c5:dd:fc:19:5e:a3:6f:aa:82:04:2a:53:14:a5:70:e6:a9:
cb:70:bb:5e:01:04:3e:1f:fc:ec:9b:2a:29:92:c0:a4:92:78:
ab:17:a0:75:ef:a9:34:22:03:b6:d2:08:14:1a:83:0d:72:bf:
25:d3:82:84:10:9c:db:f5:c1:e3:29:2e:15:81:af:d5:be:22:
98:1c:78:85:54:b7:c7:c5:42:b4:c6:2e:20:9b:ee:36:d5:91:
47:bd:9c:6e:d5:bd:1d:2f:1c:df:7c:d8:0a:2f:8a:fc:86:9d:
23:83:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:01 2025 by rpki-client