Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: VIBjmxYIj9PDHddpW9rYjgrEr74fHe8ufq+UI8wSxM0=
Subject key identifier: D7:47:98:06:3E:9B:1E:2E:2A:C3:E4:21:26:9F:B4:F5:08:DE:49:DF
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019921E7D7A2F92850EC11571B748540F666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: KhATas5SrE/3b91PvRlwMe/AI8wlOmtTbPD+VryaT5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d7:a2:f9:28:50:ec:11:57:1b:74:85:40:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=d74798063e9b1e2e2ac3e421269fb4f508de49df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:72:dc:e3:9d:2b:fc:91:8d:98:3b:c9:72:
b6:a1:43:86:d2:d4:90:b2:2d:55:af:e3:27:4c:d8:
20:72:21:b9:23:6c:d6:a4:db:7d:dc:c0:fe:26:fc:
26:52:29:76:a7:32:82:4d:40:3f:9f:2a:55:66:4e:
39:e9:0e:3e:c0:c3:60:49:cd:92:55:39:5f:a9:7c:
17:ab:06:4d:0a:da:2d:37:71:d8:1d:08:cf:1d:85:
f1:91:18:e4:83:ea:5b:bb:67:f7:6f:e7:49:b4:5f:
78:6b:8b:df:c3:12:08:5c:50:cf:8c:c3:8c:be:1d:
62:6e:18:68:f5:9c:8b:5d:b5:2a:c0:6c:d0:d3:50:
78:66:46:3a:e7:69:a0:cc:82:f3:25:f8:dd:96:02:
71:b5:65:88:8b:aa:1a:32:c0:29:d5:ad:ad:53:9e:
38:29:9a:6c:e1:a6:f9:7f:32:83:6c:4f:5d:12:45:
42:18:b2:95:e6:df:61:0a:6d:ef:44:93:8c:50:f6:
2a:f4:fd:0c:1a:b6:bf:83:3e:3b:e6:ea:52:1d:0b:
7e:07:f3:41:7e:b2:95:bb:c3:13:a3:ae:6b:85:37:
c5:57:1b:8e:df:f3:b7:51:fe:a0:f6:a3:a7:6c:ef:
cb:a4:7c:8a:94:14:6e:45:2d:62:b8:6c:21:c9:aa:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:98:06:3E:9B:1E:2E:2A:C3:E4:21:26:9F:B4:F5:08:DE:49:DF
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4c:a7:5f:d7:99:ee:7b:19:dd:0c:64:fc:95:b3:98:2c:06:
7b:cb:cb:d5:df:11:08:a6:11:ee:43:c7:28:b8:1d:4c:76:0e:
9d:66:bc:98:d2:ed:87:67:91:b9:56:12:21:c0:80:c6:3d:98:
e7:b8:82:5b:1f:e9:2c:a8:75:ae:40:9b:80:13:4d:fb:7c:4b:
64:e4:cf:5f:e2:c6:68:3f:47:fa:95:e6:69:2a:4f:b2:ce:76:
a0:ef:4a:05:66:a5:28:05:a7:64:c2:35:16:fa:96:b3:18:d4:
3e:c3:8a:9a:bb:32:81:11:c0:11:77:57:65:72:b2:27:a0:ea:
7a:ae:92:59:b8:b8:ce:ed:19:fc:f9:55:d8:a8:76:3b:60:67:
dc:ef:86:20:1a:bf:d1:62:f0:32:61:bc:4d:74:60:d1:b2:50:
81:03:69:f6:1f:39:07:e0:cf:d2:77:78:9d:3d:fc:a3:53:18:
6f:c0:68:6a:2e:09:85:59:45:f6:9b:37:eb:b4:c6:d9:9d:91:
11:6c:b0:55:b6:4b:f1:6b:f1:97:48:d8:ba:76:84:44:e6:20:
89:8e:79:1b:4d:13:da:92:f6:dc:09:36:f5:76:5a:66:12:83:
c4:67:64:5d:04:c5:2f:13:93:d1:2c:86:df:9e:b6:c9:0f:97:
48:87:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:27 2025 by rpki-client