Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: n6B4RP6zGDIhy0d4Jff4wDzqV5xH4f1D5+rR07WMRbw=
Subject key identifier: E6:9A:64:AE:84:BC:3A:F0:86:0C:38:5D:CB:32:0E:24:78:68:3B:48
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 0199277BA0B55944DFDEF3AECA1C9455E818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 1679
Signing time: Mon 08 Sep 2025 04:00:37 +0000
Manifest this update: Mon 08 Sep 2025 04:00:37 +0000
Manifest next update: Tue 09 Sep 2025 04:00:37 +0000
Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: SkpSwMgPxbmFWopveriuoPWpWFomwzEi0HgsqWwVqqo=)
5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:a0:b5:59:44:df:de:f3:ae:ca:1c:94:55:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Sep 8 04:00:37 2025 GMT
Not After : Sep 9 04:00:37 2025 GMT
Subject: CN=e69a64ae84bc3af0860c385dcb320e2478683b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:88:a2:a5:81:d5:c8:95:cc:73:d4:54:c8:
bd:14:e2:0e:a2:fb:83:a8:3f:46:f3:d5:0a:ff:ce:
06:79:3a:ed:97:61:7d:d8:78:c1:d9:ed:d7:7f:30:
59:2c:f1:58:90:da:f6:6a:51:c7:1f:81:07:f9:e9:
4b:64:ee:19:8b:bf:4c:0e:9e:67:d8:fb:e8:2a:71:
6c:ba:16:b1:66:bb:6c:e1:1c:6c:20:9e:db:5c:8b:
51:50:e2:64:b0:a9:df:fb:2c:6a:ca:a5:a0:dc:2b:
22:db:f0:d4:07:8a:a9:97:38:3c:ef:26:c3:ff:0f:
57:fb:2e:e7:bd:72:6a:cd:46:2b:67:0b:5e:ce:96:
2b:c2:ac:c4:89:7a:27:d2:03:6f:a8:0e:ea:57:83:
10:50:04:f6:9b:c1:04:aa:12:9d:96:89:ba:e4:06:
dd:6e:82:ee:aa:32:ea:db:76:89:4a:a4:df:61:4a:
74:12:17:05:1f:28:41:d5:3c:19:80:b5:0d:42:df:
e5:74:e9:d1:11:af:a4:14:c2:6f:98:97:16:06:15:
40:f8:98:09:4d:a6:6a:34:74:12:7e:6e:5b:75:6a:
ce:60:09:54:cb:57:c6:24:a1:fd:86:ce:f5:b5:7f:
90:ca:02:97:ea:45:52:fc:2f:66:60:69:10:e7:e7:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:64:AE:84:BC:3A:F0:86:0C:38:5D:CB:32:0E:24:78:68:3B:48
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:63:f5:da:bb:17:c0:87:f0:2f:8b:db:07:49:6a:7e:51:d8:
61:1c:f5:95:d4:d1:e6:93:18:ac:03:89:10:44:ad:5f:e2:21:
d4:f8:1c:23:e5:b5:6e:9b:3f:db:08:c4:79:e0:05:86:8f:9a:
cc:6c:db:0d:07:d1:2b:f3:73:a6:7c:94:44:54:69:28:11:02:
d2:9f:d8:d1:a4:11:ff:21:f1:73:1e:bd:ed:17:09:f0:bf:c6:
bf:7a:56:ba:46:3c:c9:0e:56:18:51:d6:c5:dc:d1:e2:f9:7a:
00:63:1a:36:cc:a2:a0:47:83:f7:6a:c7:c8:77:0c:9d:0b:68:
82:a8:4d:8c:a6:25:bf:08:a9:99:e8:e5:12:45:f1:80:76:95:
4e:2b:42:ce:05:ad:02:22:6d:59:c9:6a:6e:41:09:1f:e9:d4:
44:f7:06:b0:16:84:53:89:a0:df:80:8e:54:a3:bc:7d:fa:02:
8f:4c:95:b0:9d:d1:04:92:c7:79:a2:5f:01:02:d4:7e:db:83:
bd:0b:ea:1b:d7:67:b5:d3:7f:22:8f:bc:6b:a5:0f:ba:92:62:
7c:c6:ab:4f:93:bc:3d:16:22:f7:5a:2d:22:3a:ce:4f:fa:64:
28:3f:64:3e:e3:2f:64:30:a4:41:d5:79:01:f1:ca:22:95:97:
23:0a:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:32:59 2025 by rpki-client