Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: fsMWOtUD8uYDfCqpJ8Nv0LilyQGhuMphAasPzAtDlu0=
Subject key identifier: 14:E8:71:70:32:43:3F:C9:06:1E:7F:D3:50:72:66:5A:42:64:F4:D6
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 019875D1E079BD45FC3E702D33F353B340B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 16:02:25 +0000
Manifest this update: Mon 04 Aug 2025 16:02:25 +0000
Manifest next update: Tue 05 Aug 2025 16:02:25 +0000
Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: jtNcCFlL6k6f7Q8VPQfUhBFL3LWiALX8d1lAxxsf1II=)
5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:e0:79:bd:45:fc:3e:70:2d:33:f3:53:b3:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Aug 4 16:02:25 2025 GMT
Not After : Aug 5 16:02:25 2025 GMT
Subject: CN=14e8717032433fc9061e7fd35072665a4264f4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:95:19:ba:2a:3a:60:3a:ce:68:14:d4:8b:
41:6c:cf:87:ae:73:10:a5:97:b9:fa:ab:22:c6:19:
60:9f:22:02:4d:72:99:d3:51:ee:60:12:76:58:09:
9c:67:95:36:9d:83:bd:47:d3:a7:85:d1:de:9d:81:
d9:57:ae:05:69:13:52:ce:b4:00:a0:85:67:c0:4b:
38:8a:9d:4e:1c:61:07:18:c8:aa:11:9b:b1:62:5a:
27:07:96:12:95:74:a9:14:8b:da:84:e8:10:17:0b:
f5:0e:92:b9:4d:d2:74:aa:5f:3f:85:b7:9a:3f:9f:
43:67:14:ec:06:22:aa:e4:35:78:38:3b:86:84:e0:
3a:cf:59:c9:0a:8b:fc:bc:50:44:2e:35:1e:4c:a5:
4d:86:44:b2:4c:07:66:c1:af:df:a7:64:80:ed:ca:
10:de:f9:47:52:cd:3d:9d:d9:c1:12:8d:2c:35:b2:
86:9d:11:1f:fc:58:ba:72:4d:80:ff:46:aa:c6:13:
55:79:0c:68:ab:f7:8a:e9:c2:c5:8c:74:0b:af:cd:
fb:d7:64:d5:b2:3c:fc:cf:b9:d2:4e:03:ed:6e:1e:
3a:2f:0f:8e:25:aa:dc:56:7d:07:42:32:ea:dc:a5:
44:54:08:ff:2f:79:7c:86:53:97:bf:ee:51:24:3d:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:71:70:32:43:3F:C9:06:1E:7F:D3:50:72:66:5A:42:64:F4:D6
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:25:3f:24:dc:63:85:fb:f2:58:d3:14:92:c5:cb:e0:e6:
be:0a:45:0c:85:03:8f:c1:ad:08:cf:ce:21:f7:c8:15:8b:4b:
2b:0e:69:67:d0:59:33:5e:06:90:a3:51:89:60:92:9d:1f:2c:
c3:43:f8:2e:ed:a8:df:8f:8b:dd:44:30:aa:74:c9:29:80:6c:
21:44:8b:16:8c:fc:c0:9f:f6:2b:1a:16:79:d8:5a:d1:50:4b:
6f:62:13:29:af:20:53:b9:5c:10:f1:bb:8b:b4:cf:11:df:32:
0b:98:d5:76:89:fd:ad:d8:63:69:b2:0b:a5:c3:df:83:6c:f8:
bf:4a:64:06:91:9e:47:14:68:4c:2f:fb:a3:28:c5:4d:62:ec:
75:c7:cc:77:05:b7:22:41:e3:b0:2d:b8:2e:f9:21:71:2d:f8:
7b:26:a4:72:d3:11:8e:d7:07:b5:02:64:be:5b:54:03:d4:0a:
7b:04:87:00:78:39:ee:e9:2a:60:da:ff:4d:d4:4b:a6:d8:5b:
9a:7c:ac:bd:0a:eb:e2:ff:a3:1d:a0:ba:11:b7:23:09:83:81:
91:d3:70:dd:1a:c4:86:1c:c2:f9:26:9d:94:6c:31:2a:31:7c:
97:89:90:96:b5:9a:b7:16:9c:16:cf:d4:f7:b6:7d:33:02:44:
60:a5:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:29:04 2025 by rpki-client