Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: K78B/VBEeM948vBXb1+fy2vlalfQ5y9lN87TuuJKi9I=
Subject key identifier: 93:8A:25:2F:59:DE:CF:26:8D:88:02:F5:69:91:16:E9:FA:3B:8C:59
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019849D3724801C44738FCE6C7ED7932A163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0C00
Signing time: Sun 27 Jul 2025 03:00:50 +0000
Manifest this update: Sun 27 Jul 2025 03:00:50 +0000
Manifest next update: Mon 28 Jul 2025 03:00:50 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: trpRUJibwgBPkSLprAZXGShfOJ21ewDF+P3knPbyTPI=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:72:48:01:c4:47:38:fc:e6:c7:ed:79:32:a1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Jul 27 03:00:50 2025 GMT
Not After : Jul 28 03:00:50 2025 GMT
Subject: CN=938a252f59decf268d8802f5699116e9fa3b8c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:62:01:42:08:f1:b0:8e:d2:03:b5:3e:a4:
10:34:ad:d9:81:a9:59:60:96:ea:d7:d3:54:9b:6e:
e7:72:cb:c3:52:08:2d:ad:35:41:41:91:7d:75:65:
01:37:96:9d:9e:2a:5a:9f:bf:87:d3:3b:a6:cf:ff:
39:a7:f5:b9:26:a1:a5:9d:69:d3:6b:d9:42:a7:f7:
81:2a:3a:c9:4c:55:6d:1d:91:0f:1c:20:09:eb:36:
a3:a5:75:31:2b:df:81:50:4b:46:12:8e:b5:a1:df:
45:19:99:a6:81:30:de:62:a2:d4:e0:7c:f5:06:53:
e3:5a:a9:1b:59:5d:d6:c1:23:e1:9d:b4:38:19:3c:
9a:ea:fb:d8:f9:5b:20:42:0f:1d:70:cd:2e:b9:2c:
cf:1e:59:19:d1:85:4e:67:24:d1:06:9a:55:be:ff:
c8:54:70:f0:0f:88:60:2a:56:7e:2e:2a:69:fa:8d:
b6:ae:69:77:c9:f3:bf:bf:72:e7:27:b1:b6:04:ab:
67:9d:f2:44:a0:b5:45:a6:ea:dc:87:de:51:26:53:
d2:d1:4d:5c:22:de:61:91:a5:37:6c:67:b3:66:72:
3a:50:12:f8:7e:18:af:eb:62:0e:c8:f0:e3:ca:94:
73:4e:5f:81:19:81:b2:1c:06:58:b6:0a:ac:0c:52:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:25:2F:59:DE:CF:26:8D:88:02:F5:69:91:16:E9:FA:3B:8C:59
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1f:0f:88:7a:a7:53:33:30:10:5c:37:b0:1a:dd:fb:6e:d8:
4c:cc:ab:7c:c9:42:74:27:60:dd:88:ab:10:e9:90:a0:a3:23:
38:f6:26:fd:66:38:d5:a8:b4:53:4c:87:cc:7e:3a:5e:62:07:
64:44:47:52:5e:83:78:53:3c:11:12:ae:52:a3:2c:a4:24:e1:
a4:97:c4:eb:8a:a6:ae:20:fb:b1:48:7d:02:b9:08:21:47:3c:
77:d7:de:f5:f4:5f:2b:84:75:17:32:20:f8:42:6b:79:e3:ad:
3c:fe:c9:82:7b:7b:7f:21:7b:64:89:b6:7a:d2:ba:ad:e8:56:
fd:ef:3d:c8:5d:84:e7:51:92:82:79:4d:c5:b6:8a:50:17:8a:
1f:fa:ec:0d:70:76:bc:35:8e:88:7b:87:e1:48:06:1a:69:05:
b1:33:b8:c0:20:fb:9f:a7:f6:e7:c7:be:e1:3f:ae:49:1b:a8:
ba:be:2e:ec:92:a3:0a:3f:88:53:d4:39:c7:87:5c:2d:70:3d:
76:46:a5:a2:02:ac:d8:b2:53:28:52:46:ad:b6:7b:39:16:13:
62:d8:6d:c2:74:97:3d:0c:31:f0:5e:25:50:8e:8b:17:fc:f2:
70:12:1c:62:c9:5e:c2:00:02:e5:bf:f2:c4:ec:a9:f3:ec:fb:
1b:d2:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:42 2025 by rpki-client