Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: Clu9Tf2hQxPfMj7VbdfAa77vrWN+Jty6MJkJyBM6yR8=
Subject key identifier: 67:66:A2:46:BB:63:14:C3:39:7B:A5:67:97:63:66:10:EE:28:71:49
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0199FB0ED821AB7AB783CD8A3B1D9B92D279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0724
Signing time: Sun 19 Oct 2025 06:01:17 +0000
Manifest this update: Sun 19 Oct 2025 06:01:17 +0000
Manifest next update: Mon 20 Oct 2025 06:01:17 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: mKZtjm5x/ciIM2obL8E/UtEM/FfPvclR7Z+tdxm7q6k=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d8:21:ab:7a:b7:83:cd:8a:3b:1d:9b:92:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Oct 19 06:01:17 2025 GMT
Not After : Oct 20 06:01:17 2025 GMT
Subject: CN=6766a246bb6314c3397ba56797636610ee287149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:dd:fe:de:ee:a2:3e:da:bd:1a:85:4e:ad:
e1:c4:d0:51:41:63:1f:d0:9b:1f:96:19:4f:ba:19:
f3:b5:d6:08:90:91:87:38:23:e0:17:22:1d:b5:5f:
2d:d3:4d:93:bc:e0:8c:3b:9f:f1:1a:0e:69:a2:a9:
17:e4:8c:a3:d6:b7:1c:92:17:e9:74:be:ba:98:ce:
7b:56:45:2f:15:58:40:49:16:b1:5f:77:c2:63:78:
83:f5:30:77:6f:18:1a:95:38:5f:65:f8:b1:95:fa:
e4:ab:32:e1:67:41:34:6c:0f:ea:7b:d0:68:84:e0:
76:36:e5:d8:3b:1e:06:a0:c0:31:fa:35:13:b1:5d:
2b:ba:a4:79:3c:c2:35:9d:f2:01:0c:5f:26:26:09:
f1:35:da:22:81:0e:df:d3:96:79:1c:54:ee:c8:e7:
6d:53:69:91:7a:6d:26:6a:40:3e:57:b5:cf:1d:d9:
1f:1c:fd:cc:dd:1d:16:ca:77:b2:42:f8:d4:9a:f8:
91:59:2f:25:9b:f2:f0:6b:89:b3:c5:12:44:a5:d5:
1f:21:3a:82:9e:b5:e0:e8:54:dd:9f:96:b5:0d:46:
97:e3:81:2c:e9:92:e7:35:9a:79:b7:eb:2f:ae:2a:
bb:4e:ac:23:86:79:63:74:18:f2:ef:be:e4:66:92:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:66:A2:46:BB:63:14:C3:39:7B:A5:67:97:63:66:10:EE:28:71:49
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:cf:b3:3d:fe:03:d6:8e:98:5b:39:7e:59:0e:08:32:9d:
3f:d9:35:8d:c4:b6:13:7c:81:68:cf:53:55:c3:e7:4c:85:21:
d6:d8:bd:8b:05:18:2d:04:93:2a:b6:d9:91:d6:57:2d:8b:a4:
2f:f7:3a:0b:e3:75:11:ad:4b:eb:61:a9:0d:04:9c:20:c3:b7:
a1:e1:c5:11:3c:cc:7a:dc:bc:a1:19:fd:e7:92:85:93:f9:56:
69:44:c8:da:21:80:f2:09:ab:0e:2f:9b:44:58:4b:fd:48:23:
91:a9:82:30:fc:0c:fc:8b:2f:39:26:a0:98:a3:e8:e6:66:15:
37:29:c0:29:c5:0c:3e:2a:33:e6:97:c7:3d:48:05:aa:b1:c7:
63:6c:48:8c:33:02:cd:9c:29:16:3e:0e:be:7b:c1:6f:cb:34:
b1:cf:51:f9:91:02:19:6a:82:d5:1d:ef:72:47:7a:86:80:49:
5e:8b:db:b4:98:4e:17:ec:0a:8a:0a:cd:8c:83:d1:ba:96:4b:
23:6b:1b:3c:77:a6:44:5c:31:9b:10:6a:a4:ab:00:fd:e2:86:
f8:de:47:31:fb:54:cc:47:e2:80:45:0a:45:dd:8f:2f:f5:3a:
53:74:92:a6:d7:2b:08:ce:a4:e9:3d:57:03:b0:84:ca:50:4a:
b4:45:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client