Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: ibyd0cDaol7DV/XMVN3i77jg43eL9yUwlxb2X1HzXG8=
Subject key identifier: 98:3B:03:18:13:01:8A:D9:C2:34:8E:04:A4:65:F1:37:C5:5C:2F:3C
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01984AE572D565A347A9E6E4698DE6FAFA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 1211
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: tEsVD8zUXPujqrrlkviepPm0sv/icmgKPMIQO8THVss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:72:d5:65:a3:47:a9:e6:e4:69:8d:e6:fa:fa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=983b031813018ad9c2348e04a465f137c55c2f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:9a:ed:83:18:f1:c3:42:f0:09:99:7d:8c:
69:cb:7d:59:dd:8f:63:92:22:3c:56:09:de:58:cf:
00:e8:c3:b0:b1:5b:24:e3:e1:8d:e1:5c:7d:ed:53:
c4:df:a4:a0:86:14:5b:df:03:af:73:b9:2b:00:e3:
aa:3d:62:27:14:49:a1:ce:c9:6e:34:5b:ec:39:45:
74:a4:6f:7c:fb:0c:4a:b0:a8:9f:80:05:be:20:20:
41:62:e1:8e:46:74:19:ab:63:78:2b:05:e2:02:49:
a8:44:27:de:98:51:d0:ed:ec:04:69:ee:c2:0c:45:
4f:03:c3:47:2e:2d:f3:7d:af:e9:a2:eb:8e:ac:be:
ab:06:1b:e9:d9:6b:cf:cb:d9:f2:01:7e:be:00:f0:
3b:3f:69:c8:a5:6b:90:bb:bc:51:e8:ac:0e:22:35:
03:d6:2a:d7:58:3f:3a:0b:fe:5c:0a:0a:f4:26:8f:
51:58:b9:7a:ef:8b:90:eb:3b:31:79:bb:2b:82:2f:
95:75:04:e3:a7:9c:d9:3c:c8:73:0d:f2:cc:18:a2:
f7:6e:2b:97:2d:a3:e2:74:8e:79:c7:0b:49:af:d6:
bc:3e:1c:31:19:39:9d:36:4a:2d:f0:d8:29:d4:e5:
bc:d7:56:26:cb:cf:c1:d7:b0:55:52:97:6c:8e:25:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:03:18:13:01:8A:D9:C2:34:8E:04:A4:65:F1:37:C5:5C:2F:3C
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:48:a0:f3:e6:50:dd:df:5f:c0:aa:2c:c7:2e:75:27:41:
50:63:14:e0:f2:be:3c:cb:01:49:74:61:e7:3d:0c:49:7e:63:
11:de:71:3e:2f:cb:f8:62:07:a7:06:07:44:5b:45:af:c9:43:
f0:ac:71:73:50:79:31:5f:af:ee:13:e3:a8:f6:20:0b:08:5c:
da:0d:ee:e0:07:08:b9:ba:a8:7b:93:29:80:a2:66:6a:c1:9d:
2e:a0:92:88:27:78:d4:3c:bc:0d:8e:78:2f:65:bc:9f:2e:f0:
4c:45:7a:de:1e:2c:bf:94:86:c6:f7:a1:85:1d:1a:6d:ad:25:
fc:01:5c:df:6b:3a:ee:19:de:73:37:30:e7:a9:c9:8d:de:24:
0d:11:de:c7:64:42:f9:da:ac:37:0f:17:d7:af:06:db:f6:11:
46:d2:b2:fd:0e:4a:8d:3b:6a:e3:ba:89:31:ad:47:87:e6:14:
21:e3:75:10:78:2c:70:de:85:25:52:93:7c:c6:a0:92:c7:ea:
78:e1:90:a7:d1:c8:69:d4:27:c8:c4:6e:91:e8:ec:f4:6a:e5:
91:e2:43:b3:14:f8:33:ae:4d:85:f6:9f:23:c2:d4:3a:49:8e:
e7:03:40:f8:af:1d:61:84:90:ff:c3:f5:42:a7:0c:4c:da:5e:
d1:12:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:14 2025 by rpki-client