Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: jR9WeIm4r9pTXBag2ODZ4dIzMzpSl0r3H1L4Y5/B0o4=
Subject key identifier: A9:17:B7:80:CA:37:9E:D9:42:72:0A:D1:BA:E4:24:DF:F5:06:9F:EB
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019847784F93C8C2D374F34A7C0B3A96C161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:02:03 +0000
Manifest this update: Sat 26 Jul 2025 16:02:03 +0000
Manifest next update: Sun 27 Jul 2025 16:02:03 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: Gov5mlBJBo+/exbC4qPk7QC6e/aLEfpAAR0OEfRS7BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:4f:93:c8:c2:d3:74:f3:4a:7c:0b:3a:96:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Jul 26 16:02:03 2025 GMT
Not After : Jul 27 16:02:03 2025 GMT
Subject: CN=a917b780ca379ed942720ad1bae424dff5069feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:f4:99:09:98:b6:1f:8d:09:70:6a:c0:54:
6b:6c:ad:1c:94:75:b3:c8:bf:9c:8c:15:86:dc:28:
05:65:a5:43:a4:a3:24:af:c9:3a:8a:fc:77:c0:c4:
c1:ce:55:b7:cf:7c:c9:ae:f1:e5:08:d8:3c:f3:6c:
0f:eb:57:a5:93:9a:fa:4c:91:48:86:e5:a4:ed:42:
66:8a:ba:08:03:8c:3d:8a:f2:af:5c:52:6b:80:55:
51:b1:f4:61:79:ec:51:6a:9b:c8:58:8a:d7:c8:c1:
35:a6:0c:f5:8a:3e:a5:8a:09:6c:bb:13:b7:5e:d8:
df:9a:aa:49:1e:22:0c:62:02:48:c5:af:b7:91:20:
d4:3e:34:34:a7:f1:75:94:c3:85:3d:6d:8f:fb:d9:
86:a6:90:b9:43:56:b8:2f:ba:bf:c7:f7:a5:40:ec:
a1:f3:db:ee:8f:f8:47:95:c9:31:fc:bf:b4:03:35:
20:14:8c:6a:b6:42:f4:3e:2d:82:8e:a4:f2:3b:b5:
ee:d5:6d:ef:13:85:15:cd:10:66:f6:ae:ac:99:b3:
ab:a7:29:10:99:61:27:70:5a:46:4f:12:72:29:a7:
fe:e0:ef:6b:f4:88:bf:85:1f:16:f2:16:f5:2b:d6:
5f:2e:3f:6f:76:5d:d9:62:0d:38:aa:e6:58:d5:15:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:B7:80:CA:37:9E:D9:42:72:0A:D1:BA:E4:24:DF:F5:06:9F:EB
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:4e:b9:aa:7a:dd:37:5b:34:c5:49:cd:8b:17:3c:ad:86:
c4:84:64:8b:08:d9:80:27:6a:29:62:2b:5e:74:eb:52:02:28:
d6:13:3c:b2:89:43:04:d1:e1:27:51:4d:58:56:28:01:f0:91:
3d:20:73:64:a2:53:87:07:a8:43:ba:00:80:75:ce:01:df:c6:
5a:38:4b:b2:d6:a8:06:ab:19:c2:96:e7:5c:72:b0:7c:71:da:
e2:d8:fb:4e:ea:79:05:26:94:c5:cd:0a:86:7a:0f:24:06:b4:
e8:0a:b9:a0:4b:ac:4c:c9:b1:ab:bb:3a:bb:fd:6e:6d:c8:58:
11:60:c0:17:3b:3b:f1:a8:3c:c4:2d:1c:6b:45:79:78:40:2e:
03:18:14:d3:03:93:15:c7:ed:ff:0a:26:b3:8d:e8:e1:a0:0f:
0f:82:d5:7a:d4:05:05:94:31:c4:57:57:fd:bf:90:ac:1b:ac:
80:86:13:b4:8c:5e:7f:96:a5:3f:8e:69:db:07:2d:27:36:4c:
8a:c5:84:9e:2e:00:65:50:39:55:eb:64:38:bd:21:19:94:3f:
b9:4f:c0:e4:ba:66:99:52:70:a2:3f:1d:96:61:d5:07:db:47:
d4:38:be:34:ea:ce:ea:05:f1:eb:fd:51:a6:06:ca:9a:7b:ce:
42:b9:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:02 2025 by rpki-client