Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: QS2iatrI2LIq88XtofXQ570jIrjPpVp6SpJMtOmvMoI=
Subject key identifier: 0C:8F:63:0E:C8:7B:41:6B:D7:8D:08:44:2E:D2:6F:81:08:22:DD:8C
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 01974D7BA0D30774C78DA7F488A14B496C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0447
Signing time: Sun 08 Jun 2025 03:00:37 +0000
Manifest this update: Sun 08 Jun 2025 03:00:37 +0000
Manifest next update: Mon 09 Jun 2025 03:00:37 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: 7qHf4kWbMz9LatSsHecVdYfZf1irvOTUcyVcoNvOz6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:a0:d3:07:74:c7:8d:a7:f4:88:a1:4b:49:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jun 8 03:00:37 2025 GMT
Not After : Jun 9 03:00:37 2025 GMT
Subject: CN=0c8f630ec87b416bd78d08442ed26f810822dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:86:0a:f1:d1:1d:31:97:ad:7a:28:7a:b1:
c0:73:9b:be:b9:7d:e6:9f:6f:8d:e9:ed:10:57:1e:
29:84:ba:23:48:e6:e5:c2:c0:a0:44:e5:e3:db:86:
80:2f:e2:0d:3d:e5:31:1d:f9:64:18:02:e2:ad:13:
5b:c4:ba:d2:35:6b:f2:75:6f:e5:a6:b9:a3:b6:4a:
d8:fe:15:d6:41:fb:c1:a0:5f:20:09:0f:6a:6a:4f:
11:1b:95:0d:5b:95:56:4e:36:53:f5:6a:80:55:df:
37:9c:39:73:73:3d:f5:8e:05:3f:d7:b0:56:82:a6:
c0:5f:b2:9e:13:35:f7:65:77:d4:75:97:45:3f:19:
77:eb:82:7e:17:ec:ee:37:d2:ae:a8:ab:3c:5e:4d:
4f:57:da:e1:91:29:94:b8:78:3b:0d:ee:74:45:cf:
4d:24:f5:0c:d1:5f:a8:b0:2b:2b:94:b0:df:36:db:
31:08:0e:77:ca:66:28:7c:90:7f:15:6a:4a:9a:6e:
c9:00:dc:33:1e:6e:6d:15:94:d3:ea:1e:d9:a8:60:
62:ca:61:27:af:4f:3a:97:c6:0d:28:0c:c7:5a:9c:
64:6d:e8:3a:7f:87:68:7d:29:1b:7a:94:b0:fe:0a:
f9:86:7a:7c:a9:c9:6c:91:94:6b:b1:8e:b2:b5:97:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:63:0E:C8:7B:41:6B:D7:8D:08:44:2E:D2:6F:81:08:22:DD:8C
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:ce:78:94:8c:bc:f1:79:e3:b5:41:fc:86:fe:08:f4:52:
2c:b9:93:d3:bd:f5:fe:91:9f:02:de:1a:9f:1e:9c:05:38:b7:
46:5a:af:3d:42:7a:3f:49:d8:14:87:32:b7:33:91:74:a4:c1:
da:bc:32:bb:41:e0:d4:ed:79:1b:7b:19:7d:df:e1:11:65:b3:
11:ed:2d:e5:00:be:c9:87:28:ae:bf:d7:82:ef:09:5c:2d:fb:
08:49:f7:e6:86:23:d3:9a:89:c5:8b:eb:29:54:db:bc:6e:e6:
66:f1:6a:b4:18:c0:52:53:17:1b:73:ec:75:de:21:7d:0c:7e:
db:27:68:fc:d2:82:03:dd:24:1e:17:fb:85:c3:ca:11:29:26:
2b:dd:2f:58:3d:13:b6:50:b8:1f:86:97:45:9b:61:ac:63:af:
a7:f4:75:99:15:4b:37:0b:5b:3d:19:dd:92:b0:08:56:c7:fa:
17:58:f0:a6:0a:21:4c:6d:83:29:fc:30:68:31:5a:37:6d:a9:
72:d1:94:5e:c8:ec:af:db:0f:20:00:f4:ad:ce:8d:ff:da:3f:
03:4d:3f:63:12:81:d9:d9:dc:b1:c2:3e:1d:05:a0:fd:f4:2d:
02:56:79:65:28:04:ca:4e:b4:ea:f6:48:21:32:3d:c8:20:de:
78:8c:54:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe6DTB3THjaf0iKFLSWycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDQyN2RjZWJhYjQwZWJjMTk4MzlmMmQyNWVlYTJjZTBh
NTYyZmYwHhcNMjUwNjA4MDMwMDM3WhcNMjUwNjA5MDMwMDM3WjAzMTEwLwYDVQQD
EygwYzhmNjMwZWM4N2I0MTZiZDc4ZDA4NDQyZWQyNmY4MTA4MjJkZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDSGCvHRHTGXrXooerHAc5u+uX3m
n2+N6e0QVx4phLojSOblwsCgROXj24aAL+INPeUxHflkGALirRNbxLrSNWvydW/l
prmjtkrY/hXWQfvBoF8gCQ9qak8RG5UNW5VWTjZT9WqAVd83nDlzcz31jgU/17BW
gqbAX7KeEzX3ZXfUdZdFPxl364J+F+zuN9KuqKs8Xk1PV9rhkSmUuHg7De50Rc9N
JPUM0V+osCsrlLDfNtsxCA53ymYofJB/FWpKmm7JANwzHm5tFZTT6h7ZqGBiymEn
r086l8YNKAzHWpxkbeg6f4dofSkbepSw/gr5hnp8qclskZRrsY6ytZf5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyPYw7Ie0Fr140IRC7Sb4EIIt2MMB8GA1UdIwQY
MBaAFChEJ9zrq0DrwZg58tJe6izgpWL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzIt
NTBkMDA1NzgyZmFiLzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80NmQ4YjQtOGY0Ny00ZTkzLWFjYzItNTBkMDA1NzgyZmFi
LzEvS0VRbjNPdXJRT3ZCbURueTBsN3FMT0NsWXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfHOeJSM
vPF547VB/Ib+CPRSLLmT0731/pGfAt4anx6cBTi3RlqvPUJ6P0nYFIcytzORdKTB
2rwyu0Hg1O15G3sZfd/hEWWzEe0t5QC+yYcorr/Xgu8JXC37CEn35oYj05qJxYvr
KVTbvG7mZvFqtBjAUlMXG3Psdd4hfQx+2ydo/NKCA90kHhf7hcPKESkmK90vWD0T
tlC4H4aXRZthrGOvp/R1mRVLNwtbPRndkrAIVsf6F1jwpgohTG2DKfwwaDFaN22p
ctGUXsjsr9sPIAD0rc6N/9o/A00/YxKB2dncscI+HQWg/fQtAlZ5ZSgEyk606vZI
ITI9yCDeeIxU0A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:16 2025 by rpki-client