Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: VwOc8xe+DdzWLan8HgVO+N5hOR8gA+CJCBfFMUhIfrE=
Subject key identifier: E7:0C:27:27:33:28:16:32:70:39:BA:62:3D:67:97:59:23:E0:35:70
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 019845F63BA4CFB98946CEA0AD3444124618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 0E06
Signing time: Sat 26 Jul 2025 09:00:21 +0000
Manifest this update: Sat 26 Jul 2025 09:00:21 +0000
Manifest next update: Sun 27 Jul 2025 09:00:21 +0000
Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: urdflN/AQR7JeXKoXWubxKaAuqn/FKnT5UOd/2QpmxA=)
2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:3b:a4:cf:b9:89:46:ce:a0:ad:34:44:12:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Jul 26 09:00:21 2025 GMT
Not After : Jul 27 09:00:21 2025 GMT
Subject: CN=e70c2727332816327039ba623d67975923e03570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:43:34:b1:6a:54:42:48:cc:82:7e:19:d6:
9c:3c:63:8a:04:bf:9c:78:2d:c6:e8:1a:e8:29:24:
51:23:51:b9:29:99:82:6f:1c:65:d0:f6:1f:79:6e:
0b:99:da:38:df:37:8f:be:79:ab:04:50:67:85:61:
37:2f:29:09:b9:72:fd:88:8b:1a:62:dc:f4:a8:01:
8b:c2:6d:7d:86:1d:35:41:dc:cb:e9:77:4d:0f:6a:
87:e4:4a:0e:6f:7e:c1:0d:bf:35:49:7a:93:3f:3f:
32:42:00:f4:eb:26:1b:08:3e:d3:75:c9:ad:02:9d:
a2:5e:01:ae:81:2b:c1:ec:06:5f:1f:2d:83:c1:dc:
f5:d9:01:4e:99:b9:cc:7c:8f:4e:e3:c0:77:95:3a:
a0:3c:09:8b:d8:75:38:1a:e0:07:12:01:e5:96:fa:
05:79:73:ce:a8:2a:4e:5e:9a:3b:3a:34:d8:a0:cd:
76:ff:48:eb:06:7c:6c:32:09:7a:69:a1:8f:ed:89:
72:49:8b:66:97:88:df:0a:79:bd:03:1d:50:64:14:
c1:7e:a1:47:82:9c:97:76:b0:df:d1:5b:15:26:08:
f7:61:84:44:f1:fc:f9:3e:69:55:27:e0:a2:98:1d:
85:79:65:97:c1:90:82:91:23:7a:a3:47:3f:c2:7e:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:27:27:33:28:16:32:70:39:BA:62:3D:67:97:59:23:E0:35:70
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:d6:94:43:a7:bb:3c:c8:db:a3:75:5a:e0:8d:f9:fc:22:
5d:a8:9c:ef:52:47:cc:4a:05:f4:03:f9:15:08:12:ff:91:c7:
90:f5:a8:c3:17:bb:3f:a9:4c:de:bf:56:d9:7f:f6:ba:8a:b5:
95:ff:79:8b:3b:54:de:2f:03:35:76:d2:86:96:ff:2a:aa:6a:
58:e4:a7:6d:e8:1b:ce:80:d7:d6:be:8b:36:c0:d9:38:d5:c0:
19:8c:6c:ed:3f:2c:93:b9:b5:87:dd:ab:cf:bc:d9:b8:25:81:
93:e8:df:84:1f:a6:a3:e8:af:0f:d2:e9:05:6f:b9:52:94:7c:
c8:1b:54:e7:3d:0d:5d:6a:2a:38:ed:ec:37:f4:d9:da:5f:a3:
61:08:6b:8d:17:f7:b5:e5:73:a4:54:63:98:4a:60:93:2e:c0:
90:1e:58:57:0a:d9:02:d3:86:8e:f1:70:e0:6e:26:b4:62:41:
28:00:2a:9b:d9:eb:11:35:96:28:e2:bf:9c:85:7f:69:0e:0d:
ed:e0:71:8b:f6:79:ba:d9:7b:85:05:95:4f:b4:08:9e:8f:7e:
49:dc:f9:74:9b:30:9c:a4:ee:b6:dd:0a:c8:0d:17:13:9d:72:
2b:63:a1:26:8f:dc:de:94:00:21:03:59:ed:83:67:4c:06:c5:
fc:ea:7a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9jukz7mJRs6grTREEkYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0
ZDVjZDUwHhcNMjUwNzI2MDkwMDIxWhcNMjUwNzI3MDkwMDIxWjAzMTEwLwYDVQQD
EyhlNzBjMjcyNzMzMjgxNjMyNzAzOWJhNjIzZDY3OTc1OTIzZTAzNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zBDNLFqVEJIzIJ+GdacPGOKBL+c
eC3G6BroKSRRI1G5KZmCbxxl0PYfeW4Lmdo43zePvnmrBFBnhWE3LykJuXL9iIsa
Ytz0qAGLwm19hh01QdzL6XdND2qH5EoOb37BDb81SXqTPz8yQgD06yYbCD7Tdcmt
Ap2iXgGugSvB7AZfHy2Dwdz12QFOmbnMfI9O48B3lTqgPAmL2HU4GuAHEgHllvoF
eXPOqCpOXpo7OjTYoM12/0jrBnxsMgl6aaGP7YlySYtml4jfCnm9Ax1QZBTBfqFH
gpyXdrDf0VsVJgj3YYRE8fz5PmlVJ+CimB2FeWWXwZCCkSN6o0c/wn4HhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcMJyczKBYycDm6Yj1nl1kj4DVwMB8GA1UdIwQY
MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt
ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5
LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlvWlEOn
uzzI26N1WuCN+fwiXaic71JHzEoF9AP5FQgS/5HHkPWowxe7P6lM3r9W2X/2uoq1
lf95iztU3i8DNXbShpb/KqpqWOSnbegbzoDX1r6LNsDZONXAGYxs7T8sk7m1h92r
z7zZuCWBk+jfhB+mo+ivD9LpBW+5UpR8yBtU5z0NXWoqOO3sN/TZ2l+jYQhrjRf3
teVzpFRjmEpgky7AkB5YVwrZAtOGjvFw4G4mtGJBKAAqm9nrETWWKOK/nIV/aQ4N
7eBxi/Z5utl7hQWVT7QIno9+Sdz5dJswnKTutt0KyA0XE51yK2OhJo/c3pQAIQNZ
7YNnTAbF/Op6TQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:07 2025 by rpki-client