Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: 0dqf1uC9zKCMKvKQIJFvDeWfx6Xevef0eRWs8KUFDvA=
Subject key identifier: 67:CB:51:1E:EC:74:4B:2F:CF:40:4E:28:C3:88:1E:21:B5:3C:3A:5D
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 019848F71FB138E024A28B707928288880B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 063E
Signing time: Sat 26 Jul 2025 23:00:11 +0000
Manifest this update: Sat 26 Jul 2025 23:00:11 +0000
Manifest next update: Sun 27 Jul 2025 23:00:11 +0000
Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: ItnJLEov/BZXTwLAdI3h84N0okOeWgzdPk6nSKR058Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:1f:b1:38:e0:24:a2:8b:70:79:28:28:88:80:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Jul 26 23:00:11 2025 GMT
Not After : Jul 27 23:00:11 2025 GMT
Subject: CN=67cb511eec744b2fcf404e28c3881e21b53c3a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:47:16:c5:46:85:1a:3a:e0:88:5d:ed:86:
60:06:8d:a4:ff:97:4d:88:62:ba:ee:72:a7:42:8a:
da:29:d9:4f:1a:67:be:0a:d3:6d:ab:08:93:12:83:
72:59:8d:73:19:53:56:24:d1:c5:03:e2:06:27:c2:
33:1f:3a:4f:1a:db:43:1d:3c:f2:13:12:b8:57:df:
2c:72:2d:6b:20:eb:02:8e:99:92:af:4d:79:68:8a:
ba:18:7e:e3:2f:3f:5d:f9:66:2b:d6:a9:af:3c:65:
2b:f5:f2:6c:4a:fb:e0:00:dc:30:56:dd:a4:fe:22:
1f:6c:c2:4b:cb:53:97:83:27:16:8a:17:c4:d1:39:
a6:98:26:01:d8:3b:d3:1e:b0:10:0f:a5:70:14:3e:
2f:11:94:32:84:b5:04:d4:09:7d:c2:df:16:73:e1:
7f:08:d6:cb:fc:a6:88:ff:e6:51:15:af:52:e3:95:
e1:9c:45:ea:ea:c1:16:a7:39:a0:47:0a:7d:f4:86:
64:21:89:6b:1e:9a:d7:e3:59:63:fd:a4:cd:90:42:
79:95:5f:95:2b:ad:b1:bf:23:77:2b:cf:33:bb:ea:
b1:88:2b:aa:e6:c4:f7:c5:08:04:3c:17:ed:bf:fe:
83:90:ca:a6:f1:48:50:ef:ee:b7:09:7e:bb:59:72:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:51:1E:EC:74:4B:2F:CF:40:4E:28:C3:88:1E:21:B5:3C:3A:5D
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:80:a5:81:46:e3:d9:8e:e1:6e:c7:35:b0:94:19:9f:a6:2b:
09:7b:05:37:e2:3b:59:7c:24:ce:bd:93:94:08:85:53:a1:aa:
d8:cd:95:77:0d:45:d4:38:da:41:01:17:cb:46:55:f6:cf:ae:
2b:d3:7c:26:ce:98:97:b6:81:52:a5:7a:cf:65:c0:32:70:a1:
94:eb:bf:c4:87:57:a0:77:a8:89:8e:f4:32:ed:9d:66:0c:0d:
c8:06:53:3a:a6:0a:fd:e9:b9:65:25:04:ae:08:73:43:05:36:
ff:bb:7f:37:25:a9:f8:af:1a:72:9b:5a:06:3e:11:2f:0b:bf:
4d:48:ff:09:a2:6c:9f:03:4f:86:5c:f8:b7:36:5f:d8:33:e9:
8e:f0:86:57:90:37:58:20:20:93:d9:df:f7:09:29:6e:4f:14:
0a:5f:4e:71:62:21:90:09:87:63:00:11:0b:5e:1d:4c:9e:5a:
12:29:7c:0a:1d:a1:6f:a8:8e:20:7d:85:e9:aa:c0:f8:71:39:
ec:78:bc:ab:7d:60:b8:8c:ea:01:b8:4b:4a:d1:e8:92:52:b2:
63:27:e4:1f:24:eb:1d:f9:4f:9d:51:ee:9c:49:3a:ce:a5:cb:
93:e4:14:42:8d:cc:73:a2:e6:47:5e:b3:18:10:f3:69:d9:dd:
90:b6:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:24 2025 by rpki-client