Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: DFqrVgwp4hVbWMvKiviG3kyDqegbJzv9j313l2V6j28=
Subject key identifier: AD:27:D2:C0:4D:A5:59:F0:BB:78:01:8E:FF:BF:76:AF:A6:F6:E4:27
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01992367CEBD0E34E24B93BDB9EDC87F0CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0EA1
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: 2OE08r0HVaPkUyQCfPYa18KfRVg.roa (hash: oPUY4tycdurJmN4YFVOJW3ptRzFs9QL2EBmNw0lcLg8=)
2: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
3: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: 1x/FVPxOgYwbWbxlD8fmAlRLWK2HToVqoC+3a4xQ4mw=)
4: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (hash: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=)
5: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ce:bd:0e:34:e2:4b:93:bd:b9:ed:c8:7f:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=ad27d2c04da559f0bb78018effbf76afa6f6e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:fa:8e:89:02:b1:5b:71:fc:21:8c:a3:f4:
d5:1c:ae:59:23:62:7e:32:0b:df:c5:db:f4:cf:84:
1f:31:3e:07:a5:e2:94:19:79:84:44:84:37:b5:5e:
a5:5c:51:ea:d5:16:72:cb:6a:ac:86:f8:ac:3a:70:
98:89:f8:4b:31:c2:14:35:3f:3c:c5:65:98:2b:19:
06:3f:c8:68:9d:97:9e:dc:00:ec:ec:ac:f8:9a:12:
16:35:66:27:93:36:15:bd:2e:6a:14:1e:e9:60:0f:
64:81:d0:c8:ad:4a:70:ca:0a:e8:ff:96:3f:5f:6d:
06:97:d8:58:73:0c:00:1c:21:58:92:b1:49:03:ea:
da:01:28:45:38:c0:53:2c:31:39:4b:33:75:64:04:
a4:2a:61:d0:70:ed:b7:26:b6:16:36:66:91:ab:6a:
66:13:bd:76:ab:25:43:ae:65:9a:0f:be:77:ea:3c:
ee:c3:91:2d:4e:da:00:f5:68:30:3a:a5:13:34:fb:
e0:60:e2:91:53:14:12:f2:0d:15:da:21:43:ea:12:
52:bc:e0:38:4e:0d:b0:b9:08:41:0e:5f:4f:ed:5b:
59:0b:51:c3:32:35:a9:62:72:d2:c6:6d:88:30:c1:
8a:c5:d1:a2:0b:12:3f:34:1d:91:ea:5f:ef:52:05:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:D2:C0:4D:A5:59:F0:BB:78:01:8E:FF:BF:76:AF:A6:F6:E4:27
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4d:c0:f7:cc:a9:f8:e1:db:50:bc:1c:7e:be:8b:e7:e5:39:
3d:af:b8:52:63:57:c5:c2:4b:fe:c5:ab:0d:e8:4b:ed:0c:b6:
c7:78:4b:55:45:45:09:91:20:0c:90:4b:55:53:e5:79:f6:e2:
67:f0:13:fe:52:4c:15:fc:35:b7:6f:2d:cd:50:39:06:cc:b8:
f3:5f:65:e7:c4:40:50:13:a3:c9:e9:ba:58:9a:67:38:9d:5c:
eb:78:d5:3a:96:c4:a8:6b:45:84:06:53:13:67:0b:11:19:38:
c5:31:40:db:39:32:3d:20:f1:79:2f:c0:aa:c8:e7:ae:12:c8:
36:88:80:65:9d:1b:d0:69:99:09:d0:e8:2c:93:c8:dd:57:f7:
e4:b8:99:db:4b:5a:50:2c:84:9a:c9:b5:63:76:54:e1:60:66:
88:9d:f5:34:4d:98:0e:39:e5:e5:0e:7e:24:8d:e7:a6:3a:ad:
2c:b2:64:be:3e:b7:59:fc:f6:57:c5:c9:b1:ae:15:6c:56:db:
16:f5:2c:dc:71:36:f4:81:4c:1e:a0:3c:65:2d:1f:8a:5a:46:
d2:32:b4:74:87:a0:48:01:77:13:d6:ad:7b:65:c9:48:63:ab:
3b:fb:c5:9e:b3:cb:4b:ca:b2:d5:7a:d1:29:e4:f6:4d:ef:2e:
06:ca:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:16:56 2025 by rpki-client