Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: ipYl6MPXBGH6Icqz+czrBM+d2s+uHsTr2RAIUhVjaM4=
Subject key identifier: 3F:14:F8:72:72:0B:2D:73:84:92:54:05:48:10:D0:1E:7A:59:89:33
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0198499C39D410DA512338207B1FA6312D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 15E7
Signing time: Sun 27 Jul 2025 02:00:31 +0000
Manifest this update: Sun 27 Jul 2025 02:00:31 +0000
Manifest next update: Mon 28 Jul 2025 02:00:31 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: ymt5e8039OrR1ZsmDcD3DWfDxbpQ7Dfq6axjwp1SQ/o=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:39:d4:10:da:51:23:38:20:7b:1f:a6:31:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jul 27 02:00:31 2025 GMT
Not After : Jul 28 02:00:31 2025 GMT
Subject: CN=3f14f872720b2d73849254054810d01e7a598933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:a7:82:4a:52:75:0b:08:b4:cb:a1:9d:3e:
de:34:d2:22:e4:4b:6f:99:56:59:e9:77:77:71:1b:
d1:47:00:a0:e8:28:27:fe:d0:22:a2:42:9b:47:e1:
e5:5b:1a:99:7e:dd:11:91:d0:2b:36:b1:25:fc:47:
36:3e:02:02:3d:39:82:ac:d7:b4:36:43:24:5b:00:
6e:72:53:36:91:04:ef:58:5f:54:50:fa:ee:4b:31:
70:e1:1d:36:fe:1a:70:f0:7f:9e:ba:72:fb:68:6f:
12:d0:d8:aa:bf:ef:d2:0f:81:c4:2a:28:5b:40:ea:
75:b9:d4:18:ba:1f:dd:61:43:08:9f:49:7b:8e:5c:
30:50:21:b2:78:c4:f5:af:65:0a:23:f8:d2:32:31:
cb:ce:b5:61:2a:b2:1d:14:0a:12:6f:8b:a0:97:98:
e4:ce:46:ab:4f:98:ef:35:70:ad:12:19:a4:72:a8:
6e:78:bb:bc:b3:19:29:13:c9:e8:87:4d:51:36:95:
c2:b1:a5:a7:a5:73:26:26:70:40:8f:d6:ec:b8:3b:
ed:3f:8f:aa:b9:6d:0b:86:ff:05:be:4f:e8:ae:df:
69:eb:e2:a4:fb:ac:a6:f1:d6:0c:04:ed:fe:35:4e:
e9:cc:2c:a8:b8:da:9d:5f:aa:7b:9a:35:7f:41:5b:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:F8:72:72:0B:2D:73:84:92:54:05:48:10:D0:1E:7A:59:89:33
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4b:25:48:cf:c6:be:aa:01:52:b1:40:67:3a:92:8d:bd:ee:
26:f5:c1:d7:87:31:06:d6:e5:f6:dc:01:06:f8:46:b2:a5:e5:
51:c8:05:bd:13:46:87:a9:5f:d6:48:9a:f9:f0:18:b8:69:64:
21:3c:bf:c5:93:62:34:cc:f4:4f:ab:b7:f2:b9:bd:1e:97:d5:
cb:8d:59:68:90:19:4d:50:1c:1a:f0:cc:ab:90:7a:33:51:d2:
c0:66:45:5b:52:6c:4b:5a:5e:a8:4b:94:32:62:45:df:cb:f6:
b0:4f:ed:8a:4a:76:56:66:7f:c7:3f:ee:15:13:6f:e8:6f:a2:
2d:ac:cd:15:10:7d:d5:d1:ce:08:1e:b0:b6:cb:a0:9a:fd:2f:
d0:c4:5b:9e:a3:f0:c8:9a:63:ed:ca:9f:da:0b:3e:e4:fb:05:
63:16:10:5d:0a:18:07:64:5b:e3:53:a5:26:50:18:ec:8d:10:
9f:13:0b:8b:b8:af:28:8a:f2:8b:cf:20:de:c8:2a:bd:33:b9:
e5:50:f4:19:5e:fc:ad:1e:27:92:3b:7a:19:39:0f:9a:9d:6c:
9e:27:ee:e7:e4:62:b4:41:e7:e7:a4:71:a9:45:ec:da:ed:79:
2a:19:10:3c:d5:66:1a:f1:ec:18:95:2c:65:ab:8b:29:9a:b0:
b2:4f:c0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnDnUENpRIzggex+mMS2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjA4YmE0ZTc1ZTI3YjA0NmY5ZTUyNzgyMjFiNDQ3Nzhi
NmFlOGQwHhcNMjUwNzI3MDIwMDMxWhcNMjUwNzI4MDIwMDMxWjAzMTEwLwYDVQQD
EygzZjE0Zjg3MjcyMGIyZDczODQ5MjU0MDU0ODEwZDAxZTdhNTk4OTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqngkpSdQsItMuhnT7eNNIi5Etv
mVZZ6Xd3cRvRRwCg6Cgn/tAiokKbR+HlWxqZft0RkdArNrEl/Ec2PgICPTmCrNe0
NkMkWwBuclM2kQTvWF9UUPruSzFw4R02/hpw8H+eunL7aG8S0Niqv+/SD4HEKihb
QOp1udQYuh/dYUMIn0l7jlwwUCGyeMT1r2UKI/jSMjHLzrVhKrIdFAoSb4ugl5jk
zkarT5jvNXCtEhmkcqhueLu8sxkpE8noh01RNpXCsaWnpXMmJnBAj9bsuDvtP4+q
uW0Lhv8Fvk/ort9p6+Kk+6ym8dYMBO3+NU7pzCyouNqdX6p7mjV/QVtliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8U+HJyCy1zhJJUBUgQ0B56WYkzMB8GA1UdIwQY
MBaAFCggi6TnXiewRvnlJ4IhtEd4tq6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQt
YjdjZDliM2IyZTRmLzEvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQtYjdjZDliM2IyZTRm
LzEvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEslSM/G
vqoBUrFAZzqSjb3uJvXB14cxBtbl9twBBvhGsqXlUcgFvRNGh6lf1kia+fAYuGlk
ITy/xZNiNMz0T6u38rm9HpfVy41ZaJAZTVAcGvDMq5B6M1HSwGZFW1JsS1peqEuU
MmJF38v2sE/tikp2VmZ/xz/uFRNv6G+iLazNFRB91dHOCB6wtsugmv0v0MRbnqPw
yJpj7cqf2gs+5PsFYxYQXQoYB2Rb41OlJlAY7I0QnxMLi7ivKIryi88g3sgqvTO5
5VD0GV78rR4nkjt6GTkPmp1snifu5+RitEHn56RxqUXs2u15KhkQPNVmGvHsGJUs
ZauLKZqwsk/AcQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:13:53 2025 by rpki-client