Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: ky9zV1Kw6B8KFoBWIUV/kgfqH+dL92ys+2ZUQxj1Vq4=
Subject key identifier: 78:92:A7:82:14:7C:22:91:F7:79:9B:2B:93:78:51:B9:1B:D5:1B:B0
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01984BF8AAEAED0FE1071819C8551782E002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 13:00:44 +0000
Manifest this update: Sun 27 Jul 2025 13:00:44 +0000
Manifest next update: Mon 28 Jul 2025 13:00:44 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: vk+1JkGngxOp509MA7bWjMGALWa77ovdgCMCyInvdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:aa:ea:ed:0f:e1:07:18:19:c8:55:17:82:e0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Jul 27 13:00:44 2025 GMT
Not After : Jul 28 13:00:44 2025 GMT
Subject: CN=7892a782147c2291f7799b2b937851b91bd51bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:4c:61:3c:9c:5d:dd:4b:e7:c1:e9:1f:63:
c8:f6:89:45:dd:e0:23:ec:b5:6e:fd:c1:d8:64:0a:
46:3c:4b:17:c2:15:ac:d5:a8:ea:dd:07:2b:da:04:
41:02:26:e9:13:37:f1:f7:ab:59:54:40:9f:ca:9a:
2e:90:52:be:53:b1:87:ca:48:49:85:0c:d5:3e:74:
f1:40:db:25:29:c4:f1:f6:94:5e:b7:f4:1b:69:1f:
d6:e0:43:e9:20:f6:a2:11:f9:4e:39:3e:9b:28:0e:
a3:ec:ed:07:54:2d:4d:1a:0c:f4:10:cf:c8:b5:57:
b4:56:4c:95:78:e2:34:b3:62:3c:ec:3c:3b:0c:9f:
dc:9f:41:66:04:ea:3e:62:b7:e5:f1:ee:5b:ad:6f:
c4:cb:48:a6:10:85:af:f2:99:02:9d:ae:dd:f9:bc:
8a:4d:3c:f4:f4:dd:75:7a:b9:a4:b8:73:26:23:d6:
8a:59:40:12:26:8c:41:69:9d:c4:5f:73:e7:1f:3e:
92:64:a7:00:b6:ec:0e:43:09:35:6a:d9:c7:ff:78:
be:e7:e1:7d:cd:88:62:7a:4c:7c:59:c2:4a:3b:af:
0a:0e:23:9f:75:7d:e9:87:25:af:75:49:60:cb:ee:
cc:f1:e3:9d:4d:f3:ec:09:a7:2a:72:a0:25:33:da:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:A7:82:14:7C:22:91:F7:79:9B:2B:93:78:51:B9:1B:D5:1B:B0
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:92:f5:3a:4e:c7:96:27:40:93:26:5f:cd:69:aa:fe:29:a4:
de:8d:28:7c:27:cd:56:32:90:58:c5:48:2e:40:e6:0f:a5:24:
af:be:17:15:4b:cf:91:89:b3:81:40:37:5c:c6:1f:9f:c3:23:
e9:b5:80:37:02:64:c9:4a:e9:1c:67:bc:21:15:72:b1:6f:22:
ca:c1:a6:d8:70:40:8e:c2:c7:3d:03:ae:2a:d2:6e:3a:dc:6e:
18:a0:9f:17:af:b1:7a:03:8a:52:9c:b3:2e:f8:b3:10:17:e5:
aa:53:0d:10:b4:6d:be:bb:a9:f2:78:87:79:a8:c0:30:98:3f:
ed:1a:4a:18:f8:35:58:10:29:dc:dc:2b:98:80:2d:dc:77:1a:
db:25:59:8e:7c:e4:f5:ad:23:a8:00:6e:1c:40:88:94:1f:34:
2a:92:d2:11:73:0e:05:5d:22:b1:94:53:d7:b3:86:d4:98:41:
45:71:c4:c9:c5:92:ae:e6:6b:17:49:13:41:05:25:4c:18:95:
84:cf:41:8c:1f:b5:d6:54:4b:be:8a:57:13:9f:e4:85:93:a2:
56:d6:20:33:77:c5:e7:5d:15:40:89:9f:dc:16:d7:ae:9e:d1:
90:74:94:ce:d2:8b:4b:9a:bc:59:de:3d:42:c0:54:76:f7:60:
ed:81:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:42:26 2025 by rpki-client