Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: g3xA4Cn/2Hqg021JUVhBou5SeBd2mu+1SGeVFjtIDvc=
Subject key identifier: EC:BC:D6:87:DB:05:DF:07:D4:7F:6B:44:E4:DE:6A:A4:B7:FE:59:A5
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019873E2CAC0A757235D8EE13754AC83F552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 05E6
Signing time: Mon 04 Aug 2025 07:01:39 +0000
Manifest this update: Mon 04 Aug 2025 07:01:39 +0000
Manifest next update: Tue 05 Aug 2025 07:01:39 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: 438CYfilQ4T3t+rfgDoixGvjCI9/0LVK751dW+L/lv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ca:c0:a7:57:23:5d:8e:e1:37:54:ac:83:f5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Aug 4 07:01:39 2025 GMT
Not After : Aug 5 07:01:39 2025 GMT
Subject: CN=ecbcd687db05df07d47f6b44e4de6aa4b7fe59a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:d9:e0:79:6a:cc:57:d9:47:a0:6e:d7:37:
88:29:fc:fa:82:c2:5a:00:fa:35:db:e3:41:44:dc:
09:99:13:87:10:10:b5:ec:7a:a4:11:ef:e1:78:e0:
2b:59:c6:cc:8b:53:2e:71:91:2f:75:3c:cd:cd:9a:
53:d3:a5:2b:34:d9:43:d1:64:4d:a5:85:f2:3c:84:
11:74:f3:6c:b2:54:d3:fe:80:7b:1d:3a:9f:8f:1f:
65:be:59:08:22:34:23:83:ff:39:c7:11:5c:80:e3:
6e:5a:67:b4:90:75:f6:b3:3a:2a:f8:04:12:47:21:
c4:b6:4b:75:d0:4b:a3:4b:e7:4f:33:c8:76:4c:f2:
d8:79:19:09:68:f4:39:57:da:1a:23:86:c7:de:3b:
63:33:a7:36:62:05:0c:47:5f:44:38:cc:e7:11:92:
6c:71:83:f4:51:ce:58:76:97:f0:b4:b6:ef:a0:d4:
99:39:52:bc:bd:11:f1:8e:57:5f:4c:2e:cc:6b:95:
6e:fb:2d:a5:0f:f5:8d:18:cc:06:ac:d2:ed:6d:4a:
2e:fc:ad:b6:83:e1:e9:96:b0:62:ca:29:05:63:ea:
79:4a:54:1e:4b:37:b1:02:c3:b1:61:b4:c5:32:aa:
ca:15:47:23:ab:7c:a7:76:72:29:56:be:fa:ce:bd:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:D6:87:DB:05:DF:07:D4:7F:6B:44:E4:DE:6A:A4:B7:FE:59:A5
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:88:ea:ff:c6:c0:39:e4:d0:5c:d8:0c:a9:65:04:e4:b2:
a8:e7:c4:79:86:14:41:f0:12:b0:0f:ff:8e:33:97:41:a6:f3:
24:8f:71:8c:6a:97:de:a7:a9:39:90:8e:04:35:a5:3d:6f:70:
3b:02:fd:5e:c1:b1:70:3d:df:c7:ff:a2:21:bd:c9:35:4f:f6:
c7:81:1c:06:7d:51:a7:2d:9e:62:76:05:12:03:0a:da:b3:de:
4c:a4:be:1b:65:74:40:c0:c3:0a:85:bb:9e:9d:c8:f7:d8:8b:
fb:50:a9:ac:10:bf:85:a2:5c:c3:f8:f2:33:29:f6:36:c1:3a:
8f:ee:4c:f2:21:a9:36:dd:b6:f4:c9:3e:6f:ee:60:ed:d1:4a:
90:ed:85:34:5d:86:63:7c:8a:58:f5:fc:cb:27:8f:c4:53:5b:
23:60:ee:81:b1:a0:a0:dc:37:bd:89:fd:d8:d2:f6:5f:7c:84:
c5:f2:dc:b1:1d:22:29:50:4c:28:6b:cb:24:58:01:6a:29:c7:
6c:0b:04:35:44:94:b1:0d:73:d6:c7:e2:e1:7d:ef:80:cb:d8:
07:d8:27:05:ec:60:70:10:3f:02:4b:3b:dc:d7:c5:c3:3d:f2:
f8:04:06:90:c3:25:8b:fb:03:f0:72:7c:b5:a4:8e:58:f8:82:
77:5b:f1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4srAp1cjXY7hN1Ssg/VSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl
ZjBiMDYwHhcNMjUwODA0MDcwMTM5WhcNMjUwODA1MDcwMTM5WjAzMTEwLwYDVQQD
EyhlY2JjZDY4N2RiMDVkZjA3ZDQ3ZjZiNDRlNGRlNmFhNGI3ZmU1OWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CfZ4HlqzFfZR6Bu1zeIKfz6gsJa
APo12+NBRNwJmROHEBC17HqkEe/heOArWcbMi1MucZEvdTzNzZpT06UrNNlD0WRN
pYXyPIQRdPNsslTT/oB7HTqfjx9lvlkIIjQjg/85xxFcgONuWme0kHX2szoq+AQS
RyHEtkt10EujS+dPM8h2TPLYeRkJaPQ5V9oaI4bH3jtjM6c2YgUMR19EOMznEZJs
cYP0Uc5YdpfwtLbvoNSZOVK8vRHxjldfTC7Ma5Vu+y2lD/WNGMwGrNLtbUou/K22
g+HplrBiyikFY+p5SlQeSzexAsOxYbTFMqrKFUcjq3yndnIpVr76zr1qhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy81ofbBd8H1H9rROTeaqS3/lmlMB8GA1UdIwQY
MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt
ZGNiNWI5ZTg4ZTlhLzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh
LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHqI6v/G
wDnk0FzYDKllBOSyqOfEeYYUQfASsA//jjOXQabzJI9xjGqX3qepOZCOBDWlPW9w
OwL9XsGxcD3fx/+iIb3JNU/2x4EcBn1Rpy2eYnYFEgMK2rPeTKS+G2V0QMDDCoW7
np3I99iL+1CprBC/haJcw/jyMyn2NsE6j+5M8iGpNt229Mk+b+5g7dFKkO2FNF2G
Y3yKWPX8yyePxFNbI2DugbGgoNw3vYn92NL2X3yExfLcsR0iKVBMKGvLJFgBainH
bAsENUSUsQ1z1sfi4X3vgMvYB9gnBexgcBA/Aks73NfFwz3y+AQGkMMli/sD8HJ8
taSOWPiCd1vxcA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:43 2025 by rpki-client