
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: O3TKVTQBZ5+OWUo7klywsObSFUI45Ep9qzHwjCkiUXI=
Subject key identifier: 02:BD:1B:4E:C4:84:09:6A:E4:69:C9:F7:D4:31:90:77:22:C4:2E:CA
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019777F7CC645F3BA98D797299CAFFB86BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 045D
Signing time: Mon 16 Jun 2025 09:00:17 +0000
Manifest this update: Mon 16 Jun 2025 09:00:17 +0000
Manifest next update: Tue 17 Jun 2025 09:00:17 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: w+QYR104em9mdzP6tOY8uGheNj+ST+yYeAam7WnrtBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f7:cc:64:5f:3b:a9:8d:79:72:99:ca:ff:b8:6b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jun 16 09:00:17 2025 GMT
Not After : Jun 17 09:00:17 2025 GMT
Subject: CN=02bd1b4ec484096ae469c9f7d431907722c42eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:c0:ef:eb:68:96:7a:7d:d5:a7:e7:9c:4b:
ae:45:31:3a:12:0c:36:ac:28:cc:b6:59:e0:5b:50:
8c:a4:47:96:f1:f9:e6:93:0f:77:33:b5:b4:f0:8d:
c7:41:45:7e:71:b0:33:54:39:b5:3b:e0:13:7a:89:
35:a2:64:08:26:05:ec:2c:c0:df:50:2b:43:f8:c7:
44:ed:30:67:18:ca:83:7b:f2:16:2e:c9:3f:61:9d:
7a:5a:05:4d:73:3e:6c:f4:71:c9:c8:f0:96:b3:e6:
12:86:e9:df:ff:31:de:70:24:f2:69:e2:8e:2e:ae:
c5:b6:2f:e7:66:4e:ad:94:68:64:12:7a:37:84:72:
11:53:c9:4c:9d:83:97:f8:2d:74:be:63:78:85:e4:
63:7b:d6:3d:ef:d2:e3:5f:0f:8e:6d:2a:52:a6:26:
c6:94:96:03:3c:be:1d:3b:9d:1b:5a:0f:1c:1a:e2:
ce:a5:32:b6:57:99:a3:68:9e:86:75:4e:3a:90:1b:
a5:d0:b6:c6:31:c8:fa:18:c2:33:80:af:f8:01:49:
01:66:f7:e1:8e:bd:43:66:f8:d9:55:dc:fb:c5:2b:
a5:8b:1c:76:a2:1f:bc:64:c5:d6:67:04:b5:9a:86:
af:77:9d:d8:bb:18:51:ca:8d:b0:95:25:fe:f7:5b:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:1B:4E:C4:84:09:6A:E4:69:C9:F7:D4:31:90:77:22:C4:2E:CA
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:97:ef:ce:89:dc:37:87:ae:c3:6e:c7:9b:79:e4:83:c8:16:
f4:45:5b:e5:5e:f3:9c:e9:f5:13:a9:90:1c:e9:2e:ec:18:32:
c7:c5:06:a4:15:28:28:da:12:38:2e:a0:14:3b:39:e1:90:00:
bd:ca:1d:d1:a2:f8:81:42:bb:cc:23:ad:0c:f4:06:e3:38:0e:
65:c8:33:ca:08:68:0a:62:46:63:7a:18:51:75:b0:ac:70:1c:
2f:1b:48:c7:10:ab:7e:1c:10:71:7a:3d:68:ac:ed:65:bc:e0:
bb:d1:ec:75:3a:7a:4f:6e:64:8c:17:9e:d2:cb:3d:fe:ec:45:
72:a2:a3:cd:1c:7c:f7:e0:c6:b5:28:65:b2:e4:35:5a:18:76:
c1:41:82:cf:aa:eb:d5:55:22:92:50:52:f3:94:87:9e:0d:61:
90:af:51:af:8f:f3:d8:b9:d5:9d:49:85:5f:86:5d:20:ee:35:
dc:41:2a:3e:17:f2:b2:72:8f:fb:c8:3b:7e:f9:25:fb:a1:32:
04:fd:aa:73:8f:17:ad:42:10:e3:fc:c7:61:87:84:d5:00:5d:
71:b7:84:34:8b:b0:d0:c2:24:31:24:1d:24:aa:b8:91:9e:76:
43:d1:a7:6f:57:91:e4:e9:6b:94:58:aa:98:06:ff:39:b8:03:
cf:70:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:21 2025 by rpki-client