Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: 8q6/lNuFmJo+e9qtB+uf7dGCqWOy/awstjmITMfzvZM=
Subject key identifier: 4D:EE:2A:F9:21:20:89:02:BE:02:3B:32:C7:63:9E:9F:13:B0:F9:B4
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019874F4D53CDE3DAF61FD90450AD5276C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 12:00:59 +0000
Manifest this update: Mon 04 Aug 2025 12:00:59 +0000
Manifest next update: Tue 05 Aug 2025 12:00:59 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: 6ZDjhqU8uCxFrR3DVA1EUADL8H+2baSenjwhJ+bBxqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:d5:3c:de:3d:af:61:fd:90:45:0a:d5:27:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Aug 4 12:00:59 2025 GMT
Not After : Aug 5 12:00:59 2025 GMT
Subject: CN=4dee2af921208902be023b32c7639e9f13b0f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:4c:7a:79:57:8f:dd:7e:c5:90:05:9a:e6:
2b:bf:c3:d3:a4:5e:19:23:69:a0:18:2b:18:27:4b:
e5:32:76:00:3e:be:81:83:1d:bd:12:48:26:68:b8:
97:62:a8:4b:bd:52:a7:56:3d:35:f7:e0:6d:84:68:
f5:8d:08:b6:1c:dc:53:ca:5d:7c:13:a8:7e:05:db:
ac:ca:60:28:e3:4a:6b:9f:04:0f:b1:10:20:8a:17:
8f:57:ef:9f:d6:fb:6a:a2:6c:9c:39:58:9a:31:84:
90:c0:08:ce:97:c2:cb:ec:3d:13:df:b2:27:9f:30:
f0:2e:a4:3e:61:0b:78:b3:f2:6c:ee:19:9a:75:4a:
7b:7e:b7:37:02:cc:fa:27:e1:55:3e:61:b7:a8:93:
33:20:da:72:6f:7c:74:d5:5d:11:2a:e3:18:0f:1c:
5d:60:f3:e9:05:6f:7c:9f:a8:08:f9:b2:64:6a:12:
8a:28:ea:c1:2f:82:bd:a9:9f:99:53:62:48:ed:a7:
6b:8e:06:6d:5c:83:d8:2b:e9:38:fd:c3:5b:70:9e:
37:01:76:3c:f2:81:89:7a:f1:63:86:a3:5f:a5:56:
0f:81:1e:9f:f8:36:76:40:b2:bd:51:31:e9:eb:95:
20:6e:d9:07:a5:32:1a:f3:c1:9f:63:54:cb:10:87:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:2A:F9:21:20:89:02:BE:02:3B:32:C7:63:9E:9F:13:B0:F9:B4
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a3:49:68:32:4c:08:d6:cb:79:08:15:e7:8f:a5:bf:0b:af:
d2:0e:84:e7:0f:6d:b4:df:51:95:a7:64:ad:a7:af:b0:35:68:
84:8a:a6:60:d8:f1:46:2f:ff:a0:03:ed:53:56:ad:83:eb:2c:
5a:2f:1d:74:a8:2e:77:b5:34:35:db:a0:73:33:f0:a3:fd:c0:
06:26:55:4b:14:e1:66:ff:5b:7a:e3:c6:f2:89:71:6f:67:23:
25:14:be:45:0e:a7:29:3f:85:15:98:82:6e:b3:ad:ff:43:58:
88:21:88:68:ff:11:dc:0f:fa:84:dc:45:a1:57:5f:40:03:c8:
23:2c:2e:08:a4:ab:c8:54:d8:fe:98:b9:10:ac:48:48:10:62:
fc:d5:a2:8e:d5:0f:27:a6:6f:f3:2a:ea:43:8e:1d:89:4d:3b:
15:22:29:ae:f1:22:53:3d:7b:71:e0:c6:98:49:a1:0f:95:18:
de:0f:fe:8f:f7:9f:62:a4:2c:5f:05:72:8f:69:a5:72:5a:ea:
3d:fb:f8:b3:f3:29:3d:bd:a9:3f:fa:e4:b3:b0:25:cb:78:8f:
55:0f:5a:00:24:d3:f7:3c:0e:f6:73:20:51:e7:41:76:12:38:
22:12:9b:69:66:29:21:27:d3:a6:03:d6:ef:b1:dd:a1:6b:0e:
b0:b6:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:14 2025 by rpki-client