Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: hXk1ubSVdLAz1ZrHy3cESCJiTzcbpwwRGQCo3szxA50=
Subject key identifier: A7:97:35:27:3C:75:19:B3:70:95:0A:6E:36:9F:C4:39:92:28:D0:6C
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 0197B7452FF3822965BF74C115E3F5DE0F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: drsPeC26RrZ8TKQb7RSQ6BMhlMfdfrfQ+ruGpIlIEq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:f3:82:29:65:bf:74:c1:15:e3:f5:de:0f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=a79735273c7519b370950a6e369fc4399228d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:27:8b:c5:0b:1e:a7:d6:85:f3:47:e3:7e:
f3:97:2e:98:1c:77:72:2f:2e:79:c6:7d:45:f1:aa:
eb:5a:80:93:65:bf:57:0d:61:0d:74:fd:8f:7e:10:
31:32:9e:ea:57:e0:d2:94:e0:18:91:8e:85:c8:df:
db:94:b6:40:7e:55:47:6d:0c:44:e3:19:7e:92:dc:
6a:f6:a1:f7:44:a9:fb:6c:e9:a2:b0:ed:ca:01:6c:
d1:d9:c5:dd:2b:c8:0e:0d:e6:19:97:0f:75:b7:3a:
47:ea:36:ad:70:4c:24:0d:5a:20:5b:45:c2:89:db:
ac:f9:62:2b:18:61:0b:07:07:0e:fd:26:82:e8:2a:
81:cf:c7:54:d2:af:db:c5:19:dd:9e:fc:c0:d9:b0:
29:32:85:b6:38:58:57:f9:a4:1c:88:01:8f:64:fa:
81:d7:83:69:01:20:51:58:72:05:e5:c9:ea:2c:7f:
aa:00:c6:48:8b:5b:f4:08:76:bf:43:89:10:09:8a:
dc:e9:28:2f:32:8d:e5:d5:1a:75:96:b8:5c:62:13:
cc:43:75:c9:86:74:6d:7d:d9:57:70:ba:52:9c:89:
62:8a:d0:e1:2d:bb:3a:47:76:b5:88:da:5d:a0:c2:
a4:ad:b4:27:ca:44:4c:92:48:07:5f:d8:7e:4d:bc:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:35:27:3C:75:19:B3:70:95:0A:6E:36:9F:C4:39:92:28:D0:6C
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:6a:f0:82:43:65:87:bf:d2:3a:ae:7a:5c:b1:f6:35:cc:
47:32:15:a9:47:46:a6:93:5b:92:54:42:8b:25:87:10:6d:bc:
8a:9f:a0:2a:0d:6a:09:1d:1c:4d:15:ca:9c:0f:0b:00:88:20:
30:dd:90:ff:2a:1a:96:4d:69:31:c9:34:69:f1:ae:01:72:1b:
0a:8d:05:e2:26:b2:6c:08:08:f7:0b:7b:32:dc:c7:28:d8:ef:
87:85:8f:3d:26:93:1a:62:91:d2:d2:06:c1:ec:15:b4:45:cf:
09:b8:aa:65:bc:1a:93:6c:21:8c:b4:2f:a7:fa:b7:cd:46:d6:
d4:95:d3:26:b8:ee:4f:df:3f:17:47:88:f0:6c:42:6b:6e:23:
0a:d8:85:84:ff:c7:3d:81:f7:28:fe:95:3e:a2:bd:7a:b8:a2:
8f:7f:18:ef:55:27:68:cb:77:45:02:ea:9f:03:15:62:d6:60:
fd:75:da:f2:47:b0:99:22:cf:5f:4a:e9:e4:58:f2:da:c7:3f:
52:e7:0f:66:76:39:e8:3e:21:ec:6d:11:c5:7b:03:75:fd:bf:
9d:ba:8c:97:9b:90:88:8a:f3:db:31:48:04:8b:45:c6:bf:a8:
4f:51:98:09:17:66:07:e5:b1:b5:de:ea:78:73:c0:71:9f:58:
c3:8c:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:51 2025 by rpki-client