Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: dQkLZZ6z6dqGYFts1QiJRwYMV95Tm9Pdwg5Ci+26W6k=
Subject key identifier: ED:3F:00:AE:AC:02:34:7D:C4:8C:D8:B9:C8:05:50:96:34:B6:E4:5D
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01989749DB7C8BB1F2D7B79CB7A99A0F0B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 04:00:56 +0000
Manifest this update: Mon 11 Aug 2025 04:00:56 +0000
Manifest next update: Tue 12 Aug 2025 04:00:56 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: Pe9LpyHC6R4Bbwmvh2i2s3milQIlN+WctPLgqq+zQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:db:7c:8b:b1:f2:d7:b7:9c:b7:a9:9a:0f:0b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Aug 11 04:00:56 2025 GMT
Not After : Aug 12 04:00:56 2025 GMT
Subject: CN=ed3f00aeac02347dc48cd8b9c805509634b6e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:50:76:79:b9:4e:2b:ac:9c:59:61:63:e8:
a0:87:89:30:12:47:1e:a7:8b:33:30:64:7f:04:3d:
12:38:2c:6c:15:6b:4c:32:a1:33:cf:ce:f1:85:c5:
0d:30:fb:fe:3e:fc:48:66:80:d4:73:71:66:28:65:
55:2a:08:dd:ea:3c:8d:03:e5:a3:b0:f6:11:52:55:
8a:96:e9:28:55:09:ad:83:3d:00:67:aa:ae:20:b5:
b1:c8:26:a2:4f:fe:49:93:c5:86:b3:2e:02:7b:49:
95:db:41:1b:8e:da:a9:4f:b0:dc:53:ad:6a:b0:58:
09:45:08:68:13:af:fc:ca:aa:34:3f:9f:68:c5:29:
18:e9:a0:ce:2a:5f:2a:9a:2e:42:18:ea:8f:28:07:
09:61:d2:81:7d:fc:af:f0:99:5d:13:3a:1a:46:b9:
34:5a:ba:c0:62:5a:d9:3d:4c:de:a9:78:3c:0c:92:
48:5b:b2:a8:81:2f:e6:c6:be:28:2d:7f:1a:6f:a5:
19:1d:20:9a:01:50:65:69:a5:f6:58:3e:35:93:95:
19:f9:ef:75:47:08:ba:e8:0b:b6:e4:e6:51:85:85:
74:d2:d3:d0:5f:b8:b1:10:bf:70:33:42:78:00:81:
05:e0:b0:64:6e:ac:5b:12:e0:6d:c5:2b:23:05:e1:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:00:AE:AC:02:34:7D:C4:8C:D8:B9:C8:05:50:96:34:B6:E4:5D
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8f:1b:db:6d:4f:b9:25:2e:54:df:e9:54:e0:f9:89:d0:07:
d4:e2:fa:79:33:9d:e6:43:da:bf:92:9d:97:35:9d:7e:65:4b:
53:35:cf:b2:34:45:77:00:73:9b:1b:50:2d:2e:b6:c1:e5:42:
0f:91:36:8c:c4:3c:a3:fb:a4:25:95:a2:d8:77:2e:c2:f2:a7:
3b:b1:8d:67:82:03:a3:04:23:e6:06:bf:fc:79:ce:74:3b:4e:
cf:b2:f9:b1:fc:93:d5:a8:c3:31:bf:1c:6c:43:2f:c8:1e:04:
d2:ee:dd:3b:d9:b3:9c:c5:1d:23:7e:3e:05:cc:ab:75:9a:4e:
0e:71:d6:db:e2:35:8e:bb:5a:94:77:71:44:5f:99:d5:c7:83:
83:cb:7a:c2:0f:96:13:34:88:b7:15:1d:70:dd:6f:72:1c:2f:
1b:e3:18:30:af:87:34:28:59:35:db:a3:78:79:43:e8:d6:27:
56:ae:63:8f:8a:9c:ff:ff:d1:c4:36:f0:ea:62:11:76:85:aa:
09:89:2d:c5:f7:21:49:23:a6:56:0e:5e:0f:98:f5:87:11:09:
11:07:1a:56:b2:3a:12:eb:91:46:5e:92:fb:b4:a1:4b:75:ff:
43:aa:3e:ba:f9:39:98:30:54:7a:ab:df:ae:84:8a:19:02:10:
ea:85:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:42:47 2025 by rpki-client