Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: QkkCHk6aQxLeUiFolcyfY/XCtmiTZ8H8tRFS7lFRjhU=
Subject key identifier: 69:22:3E:9F:91:55:C9:0C:8B:E0:EB:6E:F9:CD:0C:FC:4A:AE:0F:E7
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0198936CF718F86B8A57CCD926C85BDBBB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 1364
Signing time: Sun 10 Aug 2025 10:00:48 +0000
Manifest this update: Sun 10 Aug 2025 10:00:48 +0000
Manifest next update: Mon 11 Aug 2025 10:00:48 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: YhwA9ZkipUIrc8ojUIBMnGGm2ru5AFsZp5CIYEJ4pfU=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:f7:18:f8:6b:8a:57:cc:d9:26:c8:5b:db:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Aug 10 10:00:48 2025 GMT
Not After : Aug 11 10:00:48 2025 GMT
Subject: CN=69223e9f9155c90c8be0eb6ef9cd0cfc4aae0fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:c0:d8:8c:20:01:74:44:5d:ee:23:33:a7:
8b:4e:30:09:05:1f:de:f2:46:ed:77:94:65:85:66:
c4:fe:c6:e9:2c:a9:64:a9:8d:1c:ef:36:f3:7a:09:
21:08:4d:a1:ba:5a:58:08:e0:64:88:68:41:eb:fb:
9a:a7:96:ef:40:8d:7e:36:8a:48:27:eb:6b:6f:a2:
8b:1e:41:a9:d1:90:53:2c:70:73:97:1a:db:6e:55:
d1:dc:7b:3e:12:e2:b1:6e:1e:23:cf:13:77:22:8e:
83:03:0b:e5:40:e7:01:98:df:ff:63:bf:ba:5b:38:
85:c2:a1:41:c3:95:96:6c:ed:1c:f1:c5:1e:c7:41:
c6:1c:4f:c1:b2:ae:03:f9:ea:c9:ca:f5:3f:08:12:
47:36:10:fc:f0:47:78:63:e3:db:d1:4a:d3:bc:e5:
27:04:57:6b:6b:a7:a8:3d:81:4f:74:e3:b5:f2:32:
8f:c9:dd:43:de:ef:b0:5a:ab:0f:84:4d:ed:bc:92:
5c:9f:b2:9f:90:38:99:60:e1:a0:03:cc:86:e8:db:
df:0d:c3:f4:38:69:13:d1:60:12:1d:91:7e:5f:44:
1e:96:94:06:73:e1:f4:55:a7:88:84:f0:2a:5e:dc:
8a:f7:28:0a:59:ad:fa:0f:ad:0d:55:cd:f7:42:00:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:3E:9F:91:55:C9:0C:8B:E0:EB:6E:F9:CD:0C:FC:4A:AE:0F:E7
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:40:4c:b8:31:2f:a5:5b:23:e7:f4:d2:71:58:97:c3:25:22:
47:e7:f0:86:6a:6f:37:b9:d0:c8:41:64:4d:bc:3f:0f:50:82:
8f:2a:59:42:8e:36:43:31:09:18:67:58:96:cf:b8:a2:8b:b0:
e1:ef:8e:bd:ab:26:06:1d:c4:e1:65:04:56:8a:5d:01:41:05:
47:cc:9d:08:94:1c:ff:8d:29:4d:d7:0f:dc:e3:8a:15:d1:33:
e2:7e:b1:67:38:5c:dd:e3:1f:a7:37:18:d6:0f:bf:3e:5d:03:
f0:43:e7:33:ae:d9:14:eb:cc:db:73:75:b1:df:a5:ce:9f:f8:
19:6d:b3:3f:5b:6a:c3:63:4b:ac:ff:82:68:14:97:35:1f:23:
25:ff:a1:fb:2d:7a:6e:a5:04:b6:7b:f8:b5:5e:1e:df:9a:78:
70:57:74:04:de:89:fa:44:8c:d5:1b:47:43:f0:0c:87:a9:b2:
56:70:bf:18:8a:1e:e7:e7:e1:0c:a6:a4:f5:79:09:36:56:c6:
08:c4:1b:9d:9c:f3:2f:b1:b1:8d:ac:7c:b1:1e:24:83:96:98:
07:4a:8c:f5:28:fc:9c:78:3f:a7:03:2d:96:c1:7e:64:2c:7c:
f4:bc:84:00:a1:07:93:28:a5:22:9d:5f:e2:da:5a:c0:16:cd:
d1:c4:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:37 2025 by rpki-client