Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: tpiKdqF7OzfO8L83RU4VpMZx3dBGmD1Rphc/YAMjcK8=
Subject key identifier: E1:5F:BA:41:84:16:EB:1A:B1:4C:9F:BD:E9:90:4D:FC:E8:08:2A:3B
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0198917EDA76EF0B509A0AD03CB722CBA51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 1582
Signing time: Sun 10 Aug 2025 01:01:06 +0000
Manifest this update: Sun 10 Aug 2025 01:01:06 +0000
Manifest next update: Mon 11 Aug 2025 01:01:06 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: 9s0IFCnSngmro8VXL9da/7/6hsunfhGWPpTQ592vHoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:da:76:ef:0b:50:9a:0a:d0:3c:b7:22:cb:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Aug 10 01:01:06 2025 GMT
Not After : Aug 11 01:01:06 2025 GMT
Subject: CN=e15fba418416eb1ab14c9fbde9904dfce8082a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:04:ae:e8:a8:40:0f:d6:cb:01:50:f4:66:
fa:60:8e:9b:3e:96:b6:6d:04:aa:34:1e:f1:fa:1b:
20:47:1e:84:d5:8f:b9:ba:bc:c4:d6:38:a0:db:69:
57:28:c7:8d:f6:ab:cb:a9:64:0a:31:42:fb:f7:51:
bf:38:76:45:c2:6e:fa:4a:9c:69:4b:1d:db:4f:5a:
53:dd:b6:3d:b8:86:42:ab:f7:7a:14:d5:9f:52:85:
38:84:8e:e6:dc:05:ec:64:92:38:a0:d4:8b:cb:31:
bd:3a:ed:a7:df:a3:4f:db:af:19:4a:65:ec:14:77:
e5:09:7c:b7:1f:70:4f:84:41:c7:98:12:cf:c2:f0:
4f:20:a8:4c:07:47:c5:33:98:a0:1b:b3:df:01:35:
25:c4:cc:e7:1e:75:8b:91:11:38:b9:df:6d:fb:b2:
7c:ec:08:19:f7:6e:80:30:29:89:b1:33:16:38:6a:
c4:95:40:17:0d:63:9b:df:b9:a6:94:99:99:5c:f3:
86:b3:39:ef:ac:1d:5e:a8:14:d5:e9:af:a4:85:dd:
6b:9e:2c:3f:f9:96:b0:04:8c:54:a1:ad:2c:99:45:
61:f2:26:08:1c:d4:7e:b9:bb:6a:b2:bb:f6:73:b9:
85:fa:4e:ac:4e:e0:e6:7c:3b:aa:f3:61:99:6d:4d:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:BA:41:84:16:EB:1A:B1:4C:9F:BD:E9:90:4D:FC:E8:08:2A:3B
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:14:0c:0c:39:40:ff:93:e9:09:ff:3b:30:1b:0d:9b:ec:c4:
96:28:cb:f0:29:63:5a:f1:08:4b:f0:f7:71:bb:41:47:3a:35:
03:a6:86:3f:05:de:60:29:cd:58:c8:28:6b:c4:76:7e:e9:e3:
30:b5:9a:08:5d:b5:cd:b8:8e:25:6f:8d:f3:36:11:30:88:f6:
fa:cf:9d:39:bb:4d:9d:e4:e1:d4:d7:c6:dc:d5:b5:15:6c:2f:
ba:75:ac:0b:39:96:fd:b6:e6:1f:4c:0f:c3:80:48:73:13:e2:
0e:ef:e1:25:4e:37:23:d7:5e:9e:12:71:ca:db:9f:5d:6a:52:
7d:51:79:b8:6e:7b:b5:cb:23:dc:be:30:89:01:f5:6b:4d:2f:
00:9d:17:42:1c:a6:eb:56:04:d9:db:fa:d1:de:3e:8b:7f:2e:
42:bf:b9:5c:ca:cd:23:bb:fb:2f:fb:76:4b:cf:06:a9:df:95:
94:1a:87:aa:3c:55:ad:1e:a3:a6:c2:1c:c9:f3:b6:7d:d8:fb:
92:d7:95:49:79:48:17:42:61:3a:2d:02:2a:0f:a3:a1:10:ba:
62:4e:53:6d:26:8a:6b:2c:e8:27:20:93:84:eb:d9:80:65:e1:
b4:34:b6:fc:e9:f6:39:59:b8:be:0c:f1:11:ef:24:b5:b3:97:
51:38:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:20 2025 by rpki-client