Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: fnoDv5RpwHiAJTatfObZjY48jC4f44LuyfnGjoGfzhM=
Subject key identifier: E1:92:AE:80:27:F8:F6:98:6F:2E:CF:65:0D:64:A8:5C:36:A7:A7:58
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0198D583F7D89D734B99177B85F9FF2AC117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 068C
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: zbQGcba6zao9KcAuDb14ebgQEAp9g7ninP2KkTHMHA0=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f7:d8:9d:73:4b:99:17:7b:85:f9:ff:2a:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=e192ae8027f8f6986f2ecf650d64a85c36a7a758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:f8:67:e4:68:db:d6:31:ad:86:cc:44:97:
ec:9c:a6:96:29:4d:d8:d4:e6:9a:33:23:14:f3:53:
23:61:e8:08:d0:ea:7c:0d:c9:d3:33:05:76:8a:f6:
cf:4f:61:db:9f:05:d3:d3:6b:74:cb:67:49:cc:0f:
35:fc:0a:5b:0e:63:0f:67:bb:b0:25:4e:f9:99:8f:
e8:7a:0c:26:22:95:45:a7:0d:ad:e4:3f:ae:2f:d5:
16:59:57:c4:89:1b:1d:ee:6d:6e:3e:70:a6:19:fe:
1a:1a:59:10:af:3f:92:0a:f2:32:a2:9c:4f:6b:7e:
19:ce:17:17:fa:09:8d:ea:fe:bf:04:e8:fe:47:b0:
f8:f4:fd:27:13:77:86:d6:e4:34:95:bb:8f:a3:6d:
aa:48:24:85:f9:92:c9:2d:f2:f4:06:ca:38:c2:37:
53:06:11:84:2f:7d:61:7d:e6:58:ce:b1:1d:81:eb:
59:6c:c5:9d:a3:b4:57:b9:87:fe:e1:38:e4:51:d7:
38:c0:a7:5b:f4:c2:e8:05:1a:ea:ea:97:79:30:f6:
86:05:c7:14:b4:b7:6f:93:6f:e9:1e:73:dc:91:ba:
33:db:56:f4:10:02:64:34:81:72:43:65:a5:06:fd:
dd:94:b7:8d:4a:60:25:c9:9b:3b:82:5d:99:9b:93:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:AE:80:27:F8:F6:98:6F:2E:CF:65:0D:64:A8:5C:36:A7:A7:58
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:8e:46:89:2b:d3:0b:d7:6c:0e:c6:c6:73:74:96:a0:1d:
73:21:4d:ac:d7:89:ab:3c:94:64:ed:bd:95:43:45:dc:fe:01:
a8:6d:29:5b:c2:d0:55:d2:96:9c:7f:00:96:1b:4b:8c:a0:51:
4d:1e:a5:4a:e3:64:53:28:9e:e3:d6:8d:af:44:09:b1:64:52:
d4:18:d2:94:0a:a3:bc:f3:5d:1d:43:7c:ca:61:0a:eb:ab:49:
36:30:21:a7:b5:39:75:d2:c1:c8:1e:3f:6a:3c:75:90:e8:58:
29:9a:da:75:f9:bd:2a:45:72:60:18:ee:a2:3f:43:9f:6f:ef:
15:47:ab:31:8e:70:00:57:d4:69:0a:73:86:f3:0f:56:6d:a1:
32:9c:00:5a:7c:1b:8d:24:1e:63:d0:6d:85:2f:ae:46:30:a5:
6e:d5:ba:be:1a:f8:f1:00:a4:56:18:86:bf:94:11:81:13:53:
75:5c:20:bf:8c:3e:6a:f9:72:e5:ca:cc:7b:67:fd:67:1b:ac:
89:7d:84:c2:c0:77:51:69:a3:f9:b7:54:49:1e:f1:2c:e5:46:
a8:61:81:22:be:0a:7a:71:a7:05:f7:d0:18:0a:b9:0f:ce:f7:
92:99:1c:31:c4:66:d9:f7:db:a0:e9:92:36:dc:df:89:84:44:
29:d0:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:51 2025 by rpki-client