Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: g6tUyjko6GcUQTxttuAUIuexw4/h4B8zetdW24H8bo8=
Subject key identifier: 15:E3:1A:08:E9:6F:82:0F:16:F4:6F:C3:FF:7C:7D:58:90:E1:B3:8C
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019894EDFF666E2CAC6EDB250B83FC8AF874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 17:01:21 +0000
Manifest this update: Sun 10 Aug 2025 17:01:21 +0000
Manifest next update: Mon 11 Aug 2025 17:01:21 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: VuvZQnN7K1asN9012BfOrJi0rzYG22fEg6zzx8ggkpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:ff:66:6e:2c:ac:6e:db:25:0b:83:fc:8a:f8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Aug 10 17:01:21 2025 GMT
Not After : Aug 11 17:01:21 2025 GMT
Subject: CN=15e31a08e96f820f16f46fc3ff7c7d5890e1b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:06:c1:0d:ab:95:34:70:f4:f2:39:4f:db:
e2:cc:69:37:c1:57:da:7e:79:01:c6:61:8c:78:23:
29:e2:43:31:aa:60:ec:75:cf:7c:27:6b:c8:29:94:
55:52:2f:d4:23:8e:dc:76:11:a8:b7:5b:ba:29:42:
56:58:d1:fb:05:08:42:92:fc:d2:10:d6:51:fc:00:
73:f0:55:c1:11:3c:ca:1c:7c:7c:82:2f:02:f5:c3:
02:19:bd:5d:8f:d1:c6:4f:43:86:c8:38:28:31:17:
14:ac:80:d0:1c:40:67:62:49:ad:29:9e:cd:4f:3a:
74:5d:0c:6f:5b:7e:ef:ea:17:f3:ac:18:1f:43:d5:
a3:26:45:e8:a3:a0:58:f7:43:07:b1:cc:33:8f:78:
6d:76:e5:50:36:06:16:6a:31:b5:b6:c0:ad:ae:b2:
48:7e:d3:87:45:eb:7b:55:2d:4e:4b:47:3a:f3:f2:
33:de:b2:00:89:95:92:34:2b:c1:54:5d:9f:95:27:
d1:70:3d:ab:c6:f4:a1:15:c6:8f:31:5d:4f:a0:86:
ef:a6:1d:c2:f0:08:d7:8b:d5:8e:88:92:7b:5d:b7:
ee:59:05:2f:05:b4:d9:1a:ac:0e:52:84:91:44:13:
90:0a:f7:03:8c:81:dc:f9:08:22:df:5b:65:f0:9b:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:1A:08:E9:6F:82:0F:16:F4:6F:C3:FF:7C:7D:58:90:E1:B3:8C
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:d9:28:44:4d:dc:4c:65:6e:65:01:e7:b1:af:3b:89:07:
13:61:e8:06:f6:bf:c5:d6:52:6e:40:3b:81:24:c7:55:ed:23:
3f:fe:2a:4d:6d:e3:d7:ba:55:34:19:65:fa:0f:d3:93:2d:57:
12:e7:b9:4e:25:67:5c:11:04:cb:ce:a8:f4:80:40:59:fc:97:
a2:e7:1d:67:24:91:50:5e:b2:54:90:f8:64:b2:ad:de:9d:0e:
f9:e5:04:18:15:68:31:a7:87:d8:92:3c:ef:81:28:4f:74:05:
de:b6:84:e9:1d:80:8a:43:95:6c:32:c3:17:30:ef:27:9d:7e:
b4:3d:96:0e:dc:5e:e7:c6:39:9a:bd:f6:63:9f:b9:36:bb:59:
7f:4e:0f:51:54:2e:80:f4:ec:29:d3:fd:94:88:4c:4e:1d:7b:
15:c0:4f:93:c6:82:d0:38:2e:e0:e2:47:5d:45:3c:7e:53:b5:
6a:cd:7a:7e:c5:26:78:b8:30:43:d5:37:ac:15:7c:fc:67:3f:
c8:56:09:a1:0f:9d:bc:3e:94:d4:78:3c:45:f6:42:a7:e8:b7:
0d:00:d8:d5:d1:e3:66:d1:e6:07:ea:06:05:77:9d:bc:cb:76:
de:83:63:16:03:c2:f0:b1:b0:e1:d3:dd:87:bb:a3:a9:20:22:
46:75:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:05 2025 by rpki-client