Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: LOd17aOKYb/lxehyV5nkahUMeF3JBmbDn8acKlwRwmY=
Subject key identifier: 97:A0:11:DE:2A:C7:A2:1C:4F:3C:C3:63:4C:8E:EC:9D:67:69:A3:46
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01993981A83816CE99703B1EDB91E046B1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 16:00:22 +0000
Manifest this update: Thu 11 Sep 2025 16:00:22 +0000
Manifest next update: Fri 12 Sep 2025 16:00:22 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: 1NlsgM19ztRaPWiigVHZGPvqMGR79eaZGFsyzyI1nx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:a8:38:16:ce:99:70:3b:1e:db:91:e0:46:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Sep 11 16:00:22 2025 GMT
Not After : Sep 12 16:00:22 2025 GMT
Subject: CN=97a011de2ac7a21c4f3cc3634c8eec9d6769a346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:4d:68:1a:d6:e5:d5:73:81:12:5c:7e:19:
cb:ef:bf:c4:14:af:03:0c:f1:09:0c:6f:35:26:90:
89:30:df:20:21:60:e9:cc:e4:d7:81:51:83:48:92:
90:4b:9e:c3:9e:7b:0a:1e:60:21:66:08:51:f4:2f:
bf:e4:7c:1a:52:8f:44:8b:a0:b7:f4:6b:68:2c:4e:
d1:04:2d:da:b6:55:ab:c5:b7:45:73:6a:c9:1c:8d:
75:d6:9e:44:c0:0a:e9:09:51:2c:ce:f3:b7:f0:52:
77:30:98:a4:07:ae:a0:12:5b:54:26:03:90:48:91:
5e:0b:65:4a:3a:ba:88:15:89:70:9c:fc:44:6d:59:
df:36:91:a4:0b:8c:c0:f1:eb:b9:a0:2f:f5:3c:46:
e3:66:95:e1:67:73:35:24:f4:f0:bc:54:1a:19:f8:
32:e8:20:e2:a2:d2:0e:5b:bd:08:8f:40:84:2e:48:
13:db:45:be:d0:aa:92:3b:95:6d:18:7d:71:dc:dc:
2f:bb:44:9c:54:df:06:0c:17:62:99:27:e6:79:a7:
2b:a3:69:a3:56:f0:22:54:c8:1a:3c:a6:f5:96:d7:
bb:08:18:25:6f:14:b8:89:3d:8b:ee:12:f3:cc:61:
79:f6:1b:76:f9:34:04:c4:90:7a:0e:03:34:c9:d9:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:11:DE:2A:C7:A2:1C:4F:3C:C3:63:4C:8E:EC:9D:67:69:A3:46
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:dc:51:b0:84:24:08:68:b2:9f:ac:c9:d0:18:7d:35:7a:
df:b8:d5:27:d5:f5:78:02:09:b8:ff:27:e0:ad:90:c0:c9:9f:
ef:0f:86:1a:10:8f:8f:d7:13:f5:fa:bc:98:87:03:e1:99:10:
59:c1:44:5d:1b:cd:5b:92:c1:bc:63:ac:93:1c:72:04:ff:f6:
5c:c9:35:0d:cb:5e:fe:fc:1b:95:72:09:fd:b3:06:33:42:b9:
14:99:d3:53:86:c9:74:37:92:c5:dc:68:a2:a1:b9:d2:1d:2f:
72:3d:47:61:f7:ee:18:85:39:26:31:0b:47:99:b8:8c:fe:59:
a9:de:d9:3f:81:e3:2d:06:ca:ba:61:3f:f5:b3:cb:a1:8f:55:
e1:62:f7:ef:9f:40:25:d4:2c:05:14:dd:34:65:5e:73:24:e7:
de:28:56:b1:14:53:5d:b4:b6:b4:ec:d6:4c:d9:71:23:cd:a7:
d1:f7:88:da:2a:79:f5:6b:7d:5b:89:28:1d:af:bf:28:83:19:
f2:8b:d4:86:ee:ac:4b:d3:8f:8d:cf:87:27:b4:09:c1:6d:98:
ef:37:cf:a7:4a:d9:51:a7:f0:17:5a:60:e9:b8:28:e7:73:ed:
c1:07:08:71:a1:57:50:df:20:c2:28:c7:bb:46:50:dc:c9:54:
77:35:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 00:32:58 2025 by rpki-client