Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: bXwXyNZxOjsUPFQg/pvpiU2jWVtgQwu/UVnPUd/KQXY=
Subject key identifier: 80:DD:AB:5F:9C:8F:DD:7E:34:4F:65:BA:A0:81:7E:B8:6C:8C:96:72
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0199380242255984EBB4DEE32B7EFAAA937F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 06BF
Signing time: Thu 11 Sep 2025 09:01:35 +0000
Manifest this update: Thu 11 Sep 2025 09:01:35 +0000
Manifest next update: Fri 12 Sep 2025 09:01:35 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: K96uNPyPQ0kQkjeVoqmLyZIUn4PSgMM9Xwiw2qB4nyc=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:42:25:59:84:eb:b4:de:e3:2b:7e:fa:aa:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Sep 11 09:01:35 2025 GMT
Not After : Sep 12 09:01:35 2025 GMT
Subject: CN=80ddab5f9c8fdd7e344f65baa0817eb86c8c9672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:13:c6:aa:ad:05:3a:6f:5c:07:8b:cd:0d:
fd:a4:64:ff:34:9d:c9:a5:da:89:8b:b8:fc:44:86:
80:e9:ac:ac:44:c0:de:8d:13:f3:3b:d9:71:48:67:
5c:5f:2c:7c:51:e4:8f:b1:cc:54:d0:89:bd:a7:e8:
f5:79:6a:ea:e6:d6:dd:79:51:1b:a8:0a:fe:cb:bd:
2a:21:13:71:d5:71:d3:a6:1a:cd:20:3a:9f:56:d3:
ff:b6:b2:d0:e2:c5:d5:04:42:5d:cf:5a:01:58:14:
92:70:6d:e6:97:47:1d:de:ec:d2:e5:57:63:59:28:
02:ae:75:4d:b2:df:1a:4c:23:7a:aa:ad:2d:1f:6a:
3a:eb:65:c7:42:7c:4e:36:a7:cc:6d:67:c2:27:8f:
6b:2b:cf:e4:08:99:66:39:63:28:46:85:9b:7d:51:
2f:f0:74:4e:44:db:de:64:a5:3c:37:89:da:3a:1a:
26:03:92:d2:12:d6:ef:62:f6:c7:bd:20:a3:5c:76:
e7:21:93:bd:34:43:33:ef:0a:63:04:09:c6:64:86:
ab:44:f6:a0:26:d7:e5:06:29:e1:f2:da:f8:45:b0:
ca:f1:03:a3:dd:99:a8:84:b1:bd:40:81:fc:49:32:
49:c7:9c:2b:97:51:7a:db:87:fb:7f:92:ec:a8:e9:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:AB:5F:9C:8F:DD:7E:34:4F:65:BA:A0:81:7E:B8:6C:8C:96:72
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:ff:9c:81:ac:ff:5b:d7:d8:4a:7d:63:b7:e0:01:91:cd:
66:f7:aa:46:42:23:6f:0b:a1:17:3e:b0:0a:45:fb:af:ce:e0:
2b:8b:e6:30:14:63:a6:9d:9b:de:59:d3:18:c0:b1:9d:fe:a7:
ca:4c:6f:61:c1:33:b9:b2:26:5e:d8:58:ca:f1:af:d5:1f:86:
f3:89:11:65:a6:3f:fc:b5:f7:cf:4a:7f:67:c8:81:2f:9e:e7:
80:92:66:28:48:e5:0f:5f:29:33:15:16:33:d8:f6:ce:06:31:
55:64:19:ad:22:7d:3a:13:1c:0e:7c:9b:57:87:67:48:cf:05:
06:1d:0c:36:38:ad:8b:5c:ae:9a:44:dd:d9:b4:43:51:aa:af:
a1:61:e6:67:66:35:d6:f9:59:f9:55:a5:e0:cf:d3:ac:5e:91:
dd:0f:b3:59:4c:28:b0:06:e4:3e:cf:53:86:76:3d:89:c0:dd:
55:cb:49:74:56:ff:12:4e:cf:46:35:cb:83:9a:9c:b8:f1:cf:
30:3e:87:62:36:a4:d7:ff:fb:88:54:75:63:b2:88:54:f4:17:
d1:92:3e:60:aa:66:71:e2:52:05:3d:d2:db:e2:f7:7b:58:2f:
af:fc:b3:a6:06:8e:03:81:37:17:f3:05:a8:4e:05:88:e5:b5:
54:c6:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:46:06 2025 by rpki-client