Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: BDMdt1niSAeMNFD1+1h38QlFVQyWx55MWLNhHT4nZj8=
Subject key identifier: 09:60:FB:26:24:AB:F0:84:EA:EF:1B:C1:07:94:96:65:9C:E0:DF:84
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0197B5C50B4840FD3AD282F0D694694EC026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0991
Signing time: Sat 28 Jun 2025 09:01:18 +0000
Manifest this update: Sat 28 Jun 2025 09:01:18 +0000
Manifest next update: Sun 29 Jun 2025 09:01:18 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: Q/yrl/aVlrV86dQvB30lQggA2tBRmk30SxzUbnVpOJ8=)
2: ZHD5dava3w2N4kCoC2nNmHFgkaE.roa (hash: gwDwlr/q6X598Hy0yc+sN6UItT1+TQ/iMV+TYJ9WvQ8=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:0b:48:40:fd:3a:d2:82:f0:d6:94:69:4e:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jun 28 09:01:18 2025 GMT
Not After : Jun 29 09:01:18 2025 GMT
Subject: CN=0960fb2624abf084eaef1bc1079496659ce0df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:7e:6c:a8:53:5b:1b:26:4d:11:f5:3a:a6:
05:59:f0:f4:48:c3:c4:25:cd:7a:b7:f9:83:fb:5e:
63:c4:4a:98:3f:74:a3:2e:56:cf:69:64:50:42:bb:
5b:a0:90:a7:09:d1:36:47:6f:bb:4f:e2:73:f4:71:
a4:6f:6f:ca:95:ab:85:ad:d8:41:6d:1a:cd:c7:50:
0b:ee:11:05:df:cb:3b:b7:c2:9b:c8:ae:79:f2:51:
6a:b9:a8:22:31:5b:e2:2f:90:05:61:19:5b:77:8c:
1f:d9:07:15:fd:bc:23:a9:07:e7:a5:ef:eb:53:54:
1e:38:d6:5f:82:0e:77:30:39:55:61:4d:a7:24:34:
a7:10:bd:54:4c:ff:4d:d7:15:d2:37:93:d5:3b:7e:
07:01:a9:b1:0d:75:92:3c:b8:a4:eb:f5:9d:6d:1b:
7f:a9:72:0b:82:f0:fb:6e:11:4a:52:c0:0c:02:3d:
da:41:48:3a:0c:4e:75:1c:6a:58:47:41:d7:9e:ac:
75:c1:c9:37:69:2d:ee:30:c3:cb:12:d2:75:ae:61:
3f:b1:63:87:52:9e:36:e4:e8:b1:ce:7c:81:17:4e:
15:57:84:0b:ae:7b:8c:a9:c7:56:2c:7b:8d:7f:23:
5b:54:ef:45:69:cf:7d:80:a0:fe:ea:61:8f:31:84:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:FB:26:24:AB:F0:84:EA:EF:1B:C1:07:94:96:65:9C:E0:DF:84
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:3c:64:81:1d:83:74:b3:f5:67:85:6e:b1:d4:cb:c7:24:
dd:ff:2b:c4:c9:9e:d2:42:b9:23:ea:a2:7a:20:62:d2:47:94:
89:ce:6c:aa:5e:16:10:67:02:ad:76:10:88:f3:59:99:d2:73:
92:d9:83:04:e9:1b:23:09:7f:b0:0c:04:e9:2b:de:3d:a6:67:
0e:72:07:79:a8:a1:bf:a9:6e:8a:4c:cc:1c:aa:bd:42:eb:3c:
c3:0a:5b:a6:9b:55:2c:4a:be:97:5a:6e:e8:3f:36:ed:70:5c:
02:d9:5b:d5:6f:9b:76:c3:5d:48:36:ab:fd:e8:0d:1f:56:b4:
61:ea:8c:f7:f4:6e:fa:51:1a:46:80:07:75:91:ab:89:76:fa:
8d:42:a2:18:04:a4:67:81:80:21:0c:1e:07:5b:1b:20:cd:c6:
c4:9c:5d:91:7e:38:4d:9d:03:ee:b0:fb:88:5e:a2:24:00:02:
73:dd:91:b7:69:ed:6a:2e:55:ef:e6:d2:4e:03:cb:2c:0a:f7:
10:7c:44:8b:af:1f:0f:95:be:34:2a:e5:c9:8c:39:d1:98:08:
46:80:07:a6:64:28:48:2b:6f:c3:6c:2b:61:03:0a:5f:24:7c:
3f:49:3d:53:80:20:02:cb:fe:50:24:78:93:ec:41:15:ac:5b:
58:c4:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:44 2025 by rpki-client