
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: S0z/fMtSqXQKmF1Va92gPS2so5Zx89FgH20ystxttdk=
Subject key identifier: 45:DE:D7:93:B6:64:90:32:70:44:8E:97:70:6C:7D:15:50:E8:3D:EE
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0198808B4F37F7D086CE5CABB07A2EAD787C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0660
Signing time: Wed 06 Aug 2025 18:01:09 +0000
Manifest this update: Wed 06 Aug 2025 18:01:09 +0000
Manifest next update: Thu 07 Aug 2025 18:01:09 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 9ase8qo2FNGgMGzKeWxTYgsK0krdfkTCZtFuvn5IzzE=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:4f:37:f7:d0:86:ce:5c:ab:b0:7a:2e:ad:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Aug 6 18:01:09 2025 GMT
Not After : Aug 7 18:01:09 2025 GMT
Subject: CN=45ded793b664903270448e97706c7d1550e83dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:86:75:04:aa:07:09:92:ec:22:15:9a:e6:
fc:fb:3a:56:3b:18:3a:59:85:22:b0:71:6d:80:6c:
de:8c:af:28:92:39:d8:fa:43:8f:e2:19:19:b4:82:
bd:bb:60:3c:26:5f:79:d0:c5:ed:6d:ea:c6:c9:e6:
62:a6:db:b1:55:d8:f7:f7:e3:a1:77:7e:79:bf:d7:
58:13:6c:9a:86:84:50:28:ee:e1:7d:cd:fe:47:70:
3c:6b:4d:7b:01:99:a8:17:f0:c6:9b:b5:4e:d9:4b:
56:45:a3:d9:b0:36:b1:e2:d9:05:52:97:f6:d6:c3:
f5:83:54:f9:73:0e:ae:7d:80:a4:c4:6d:c8:36:b1:
35:42:17:ca:cc:b6:cb:3c:f2:b6:aa:07:dc:46:89:
a7:30:cd:71:95:c0:d8:5e:2e:f8:ad:3e:70:62:36:
07:d6:04:5e:2b:c6:8b:d9:36:dd:ec:f5:df:74:90:
c0:9e:6f:4d:7f:d7:89:45:9b:b8:98:5b:78:aa:db:
b7:4c:7d:dd:ea:cd:7d:29:b0:69:6c:ed:4d:f9:bf:
07:00:51:a7:4b:66:15:9a:65:b9:17:f5:38:5d:4e:
83:72:c6:73:34:bd:60:49:79:cb:a4:f3:a8:3b:2b:
da:b5:9a:58:a6:a8:09:64:26:e6:0f:15:4b:35:46:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:D7:93:B6:64:90:32:70:44:8E:97:70:6C:7D:15:50:E8:3D:EE
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:ed:55:3b:74:4f:bc:7c:64:57:77:a6:39:f5:57:86:e7:
6a:9b:f4:76:d4:1d:ad:80:4b:09:71:6c:07:4f:74:23:a0:87:
2b:94:bd:22:af:c5:59:a6:41:3f:0f:42:ef:59:f0:36:90:ac:
0c:15:96:d3:af:cd:ee:81:b5:03:cd:a0:0e:0b:cb:10:2e:ff:
c7:5d:09:f4:2d:de:15:e2:4d:8f:9e:53:e9:ba:a0:de:61:1e:
21:1c:39:a1:30:e9:7a:07:58:a1:d1:97:37:04:69:57:f3:53:
42:64:cf:8d:14:b2:65:28:13:9d:39:67:96:41:b3:0f:74:af:
de:cd:59:0a:79:a2:eb:3e:01:95:58:89:67:6c:bb:38:4b:8b:
1b:56:85:d3:b1:89:eb:08:42:00:aa:a5:a5:56:b2:07:c6:1b:
77:5d:e1:73:26:1a:4c:0e:b0:c2:85:b0:95:df:1a:13:7a:34:
bf:75:68:fd:64:f6:5e:bf:99:f6:2b:57:ab:19:5d:0f:35:36:
bd:79:df:3b:4e:51:4f:c6:ec:02:02:2b:69:de:52:c2:ea:9a:
46:44:44:e8:db:5b:14:c5:d0:82:cc:ff:6e:f1:52:c2:66:d6:
b2:00:58:d4:7f:e9:f6:a8:a9:bf:e1:0c:61:2a:ec:03:71:09:
7d:f1:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:48 2025 by rpki-client