Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: lQGVBOrrpbkKWomCaOGSqlV5D6Etrq5feBPfOrZ2pIM=
Subject key identifier: E8:86:9D:91:8D:F6:04:54:5C:97:F7:3E:EE:E3:5A:1E:63:22:3C:5C
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01983DCF9343577A103635BCC1BF4948932A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1466
Signing time: Thu 24 Jul 2025 19:01:10 +0000
Manifest this update: Thu 24 Jul 2025 19:01:10 +0000
Manifest next update: Fri 25 Jul 2025 19:01:10 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: BgvqeoEbYPHRd7x95D+xVfqdyBP4Vw5rXhcUAFnu8zg=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:93:43:57:7a:10:36:35:bc:c1:bf:49:48:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jul 24 19:01:10 2025 GMT
Not After : Jul 25 19:01:10 2025 GMT
Subject: CN=e8869d918df604545c97f73eeee35a1e63223c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:67:8d:17:b6:3f:2b:c4:e8:da:90:d5:4d:
f8:c3:90:18:3e:c2:cf:20:18:bf:fc:65:d1:11:40:
00:30:95:61:5f:c0:fa:2a:ba:6e:f0:03:64:69:ad:
7e:65:2a:0a:91:bb:1f:b5:a0:7d:30:22:e7:64:43:
6e:97:8f:fa:2b:fb:07:39:ae:3c:92:81:e4:c7:dd:
30:bf:1d:0d:02:ec:95:be:d2:c1:a8:1c:f4:c5:f5:
f7:a9:5e:85:0c:f0:90:7c:72:03:ee:51:27:a0:2e:
cd:a2:40:99:62:1f:38:db:ee:40:d8:bf:cf:4d:50:
14:bc:ff:08:65:08:83:9e:78:e1:d0:ca:c6:3e:76:
b5:9f:08:2c:05:50:fd:0c:3f:45:2e:f9:f6:18:02:
6a:78:1e:b5:68:8a:14:fe:1f:07:ee:ca:92:15:9c:
29:24:4c:fa:04:a5:a4:fd:ee:cd:4b:56:6b:03:61:
0a:17:79:24:2f:03:62:35:10:d9:cf:2b:d0:2e:37:
fd:73:01:88:dc:10:c0:fc:09:eb:54:bf:cf:3b:0a:
53:1a:b7:cb:d7:d3:a8:2f:0d:25:ab:b0:6a:01:91:
49:fb:9f:8e:b9:cf:46:de:e1:9d:7c:66:42:0c:e8:
e6:d3:a3:b0:e8:06:51:31:fe:42:56:b7:ea:34:66:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:9D:91:8D:F6:04:54:5C:97:F7:3E:EE:E3:5A:1E:63:22:3C:5C
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:87:b4:e9:97:9d:30:72:55:7d:59:91:37:c3:c0:0c:57:c9:
44:6e:67:58:61:06:6f:10:9f:6c:80:43:20:77:9b:2f:d2:cc:
63:11:ee:93:37:92:54:fe:53:5d:32:09:56:05:ec:4a:e6:96:
8d:8d:dc:57:c3:34:00:01:79:fd:ec:99:4b:c3:53:6b:12:d8:
cc:08:8f:35:6b:70:ef:71:43:09:71:54:02:15:0c:7b:52:1b:
b8:46:60:6e:28:c7:7f:5f:2f:07:4c:fa:b7:4e:f0:d5:44:c0:
26:4c:99:9a:9f:eb:8a:82:d0:23:65:fd:6c:de:59:77:1f:9a:
c3:28:76:b9:8d:fe:9e:10:3c:ad:b1:bb:88:4c:44:cd:85:d1:
c5:5d:88:fd:00:67:83:a0:b2:81:53:87:b7:b9:2b:31:83:e7:
a9:79:92:1e:0b:c0:7a:d4:89:8c:db:ca:d7:55:07:f4:0e:7f:
24:53:d6:e9:3b:cd:60:23:6a:02:4e:fb:49:25:28:96:90:19:
0d:32:d5:50:05:9c:46:11:7e:50:ef:6f:e6:da:a4:1f:5b:0a:
7d:3a:c8:3e:68:af:f1:79:79:d5:d4:47:a4:4c:14:71:5c:3e:
62:a8:93:b7:e4:69:2e:ee:f3:a3:d5:7e:5a:ec:70:91:ef:a3:
63:46:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:29 2025 by rpki-client