Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: R5p2zJoHejxLuGoJgyWftjgfNCMrSx5V1hpLUyfq258=
Subject key identifier: 18:66:1A:BE:6B:01:51:3D:FA:99:15:4B:A0:A2:4E:FF:55:EE:CD:71
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0198537B7FA2F39B2A95CA62E41EF27D29B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 00:00:59 +0000
Manifest this update: Tue 29 Jul 2025 00:00:59 +0000
Manifest next update: Wed 30 Jul 2025 00:00:59 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: UBYk60YbryBzCifQGS5r7d6ltfSqKoAXf5pOZrEXohI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:7f:a2:f3:9b:2a:95:ca:62:e4:1e:f2:7d:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jul 29 00:00:59 2025 GMT
Not After : Jul 30 00:00:59 2025 GMT
Subject: CN=18661abe6b01513dfa99154ba0a24eff55eecd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:08:45:bb:10:70:19:47:b4:94:16:34:26:
ff:c4:54:d7:6a:81:dc:e7:2e:3d:40:37:e7:9f:7f:
a4:ec:91:3d:d7:01:b3:e0:d7:3e:2c:1d:13:33:8a:
7e:30:a1:4e:95:83:d9:92:02:df:24:33:db:2c:9a:
b4:e6:3e:35:7b:0b:c4:24:8f:f2:7a:40:ee:f3:56:
d6:46:95:6c:34:ed:6e:e5:96:50:dc:2d:85:17:48:
af:b0:f9:59:ca:71:7d:8a:7f:b4:36:34:29:b4:ef:
13:44:70:cb:92:dd:78:08:64:5f:d7:57:72:86:c4:
6a:e4:82:2c:0f:40:d3:91:ba:89:b7:73:d9:c3:8a:
86:7e:ed:2f:53:6d:c4:c1:38:c7:9f:16:9d:a8:af:
0f:a7:bf:83:4c:43:19:ba:a8:e8:64:39:18:2b:3a:
70:b7:d4:b3:00:a3:8e:46:0e:1a:dd:6a:58:32:6c:
3c:07:3c:ed:8c:3c:67:88:05:ea:40:c6:83:77:a5:
68:a8:c9:a7:7d:ac:52:a5:9e:a9:34:50:ae:26:54:
91:b8:f0:b3:ea:00:2b:1e:2f:83:f4:b5:92:c2:00:
96:bf:72:37:df:df:b5:d7:e7:cc:e1:e2:7f:68:ad:
5e:ae:07:a7:47:7f:00:be:53:a7:3d:59:80:c8:17:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:1A:BE:6B:01:51:3D:FA:99:15:4B:A0:A2:4E:FF:55:EE:CD:71
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7b:03:68:96:96:31:6c:7f:ed:2b:24:73:ef:31:53:aa:4e:
4a:46:a3:a7:f1:25:70:52:07:93:db:6b:d7:6c:30:16:5f:4c:
3d:62:e4:b8:54:c2:2e:2e:37:c6:0f:8a:f4:15:04:78:9c:c7:
11:d2:c6:e6:4b:42:39:3f:a7:14:d7:a7:13:3d:3c:d6:a5:28:
3b:6c:40:20:fa:ad:5a:a7:a3:05:9f:f6:bf:46:97:7d:0c:db:
5a:98:40:4f:44:cd:83:7a:19:96:0b:d0:64:c5:f7:a5:ef:d1:
89:b3:28:6a:e4:33:f0:21:cf:c1:0e:5c:54:94:d8:c8:85:22:
0e:aa:8d:74:28:fe:3f:a4:20:49:b0:ba:0a:08:9d:74:e0:7a:
6e:4b:f6:6d:60:8d:4b:21:cb:c1:fa:6f:52:d9:76:b2:7d:fb:
81:33:16:20:8f:36:0a:44:50:08:f8:02:b5:d4:3f:04:5d:13:
d0:5f:57:65:a1:f3:21:4d:46:b2:ab:4d:0d:db:bc:c9:59:38:
5a:15:eb:b8:ab:19:6e:25:47:1b:d5:67:70:68:41:4e:c2:0c:
3f:ec:a4:8d:a8:95:e3:1e:d0:71:45:73:e9:b4:29:46:79:83:
2d:44:13:ff:5d:2e:d3:58:46:78:9b:a0:7a:1c:c0:29:7d:ea:
57:46:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:16 2025 by rpki-client