Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: qLcIXt4I6g4pZKL0Y5UkI7EvrTfWCqSxmjL3P1pguhM=
Subject key identifier: 44:81:21:E0:97:8B:6D:9E:DA:8D:22:A4:D9:99:1E:D9:55:FF:22:DE
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 01988A3343586631C63E9DFB2A27FBC97080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 04EB
Signing time: Fri 08 Aug 2025 15:01:12 +0000
Manifest this update: Fri 08 Aug 2025 15:01:12 +0000
Manifest next update: Sat 09 Aug 2025 15:01:12 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: hQx8S6Xden0etE2jtFMLOaKZfJDGBfOU2CgWJCogrgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:43:58:66:31:c6:3e:9d:fb:2a:27:fb:c9:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Aug 8 15:01:12 2025 GMT
Not After : Aug 9 15:01:12 2025 GMT
Subject: CN=448121e0978b6d9eda8d22a4d9991ed955ff22de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:76:a8:95:2f:2c:50:66:e0:55:59:5c:4b:
40:1b:0e:e7:87:66:5f:dd:e2:2a:fd:4c:a7:77:d1:
e2:65:75:10:2d:1a:b2:26:22:90:5d:45:1c:7e:f5:
1e:fa:2e:7d:53:e0:95:8a:36:18:58:cd:90:cb:30:
d5:5e:f3:76:cb:53:2d:f2:e3:e3:3f:1c:80:76:1d:
ae:37:31:11:3d:68:e4:dd:36:31:35:27:0a:1b:98:
6a:71:77:87:8c:b4:e9:11:40:b1:16:28:3b:7f:48:
3a:cb:d9:9b:a8:82:86:26:06:2c:d1:f2:51:82:c6:
43:92:47:87:5a:58:1e:9b:30:dd:6b:56:48:f4:f5:
9b:10:df:d6:39:f9:fb:1c:4a:96:45:f4:2a:26:a5:
3d:c4:14:67:9c:bd:6a:61:ef:6f:21:1a:38:32:f4:
e7:8a:1d:a5:d2:d0:e8:92:fd:38:b3:c5:cf:2b:a0:
34:09:91:66:f3:e1:e0:a0:0c:8c:5b:dd:2b:e9:56:
4f:25:44:f1:dc:dc:18:6b:fa:36:5e:1e:ac:06:7b:
ee:15:5f:9e:6d:67:78:31:f4:8c:0b:36:ef:0f:80:
4e:23:70:c1:28:0f:45:1d:e0:c4:4c:2c:7f:6b:f6:
d5:d2:c7:32:0e:fc:7c:de:95:b1:95:c9:76:df:be:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:21:E0:97:8B:6D:9E:DA:8D:22:A4:D9:99:1E:D9:55:FF:22:DE
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:de:d2:1c:4d:9a:00:0b:66:62:a2:6d:db:b4:62:9e:e4:88:
27:95:39:10:19:a8:04:44:3b:62:c0:33:e8:37:55:e6:29:4b:
25:76:f8:b9:d2:43:bf:e8:77:21:c8:ed:a5:74:9a:27:a1:6c:
a4:90:f9:30:98:2c:13:22:37:5e:d9:be:a6:4d:2c:3c:81:7c:
68:8a:6a:c6:76:09:b0:ff:09:eb:54:09:6e:15:21:13:46:63:
d1:2c:a8:57:d7:41:94:b5:0a:7e:3f:7a:cc:d4:d4:8d:d9:bb:
14:81:a9:0b:83:11:60:01:5e:93:07:fb:8a:bd:5a:b9:06:c6:
7e:71:1b:c4:fc:99:3a:5a:77:97:6e:d5:e7:b2:6a:58:ea:0a:
a7:89:97:f5:07:b9:c9:e0:ba:80:aa:e7:56:a6:6c:11:df:cf:
d3:f0:de:a9:75:38:8f:bb:5d:57:9f:a3:4d:cf:71:30:04:12:
bd:99:80:76:03:82:3a:6c:a2:fd:07:2b:39:ba:d9:76:a2:77:
35:20:14:6a:f6:71:40:c0:5a:19:d3:08:47:21:e4:51:54:b0:
51:5c:22:7a:53:22:41:e9:ab:6c:61:a8:c0:54:b8:d4:80:32:
27:46:a5:bc:7b:01:a8:49:48:95:1f:04:af:f9:d0:14:17:99:
a8:71:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:45 2025 by rpki-client