Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: ojzzuYBwwebJCqj3FvmdZ5SWYF+qb7X27NbfuEr5ptE=
Subject key identifier: 4A:77:CC:70:31:B9:64:7D:82:09:85:EA:40:23:5C:7B:97:2D:23:97
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 0198D4E04E36ADC7E68815F6CB5696540A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0C48
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: aZ4BfBePeH67W0WAiCi/vj5ZM/GVHO+CuIHCZnso5g0=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4e:36:ad:c7:e6:88:15:f6:cb:56:96:54:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=4a77cc7031b9647d820985ea40235c7b972d2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:c5:a9:68:77:07:a9:5f:16:b3:ed:f3:4b:
59:e2:50:59:86:95:f1:2a:cd:6d:45:6a:8a:cf:4e:
51:f0:c4:5e:8d:fb:a9:40:82:d2:c2:f0:46:84:04:
d7:93:37:69:67:c1:52:1a:a2:de:09:c5:33:fe:29:
ad:5e:7c:c0:2e:f7:04:04:7c:46:ed:09:45:a1:d9:
8c:74:9e:84:5f:38:a8:b8:c7:90:08:f4:50:f9:bf:
d2:87:1e:7d:bb:3a:67:5f:0a:cc:09:b1:ff:af:65:
4d:bc:a9:04:b9:f0:5f:f1:4c:e8:9b:27:9c:3d:10:
29:9f:1e:7f:16:6b:5d:66:9f:b6:d1:4a:6e:b4:00:
7b:89:03:b0:b4:24:49:89:fb:d8:54:35:91:90:26:
3c:06:bc:ec:84:3d:ff:57:57:51:6c:20:fa:34:15:
96:5a:e5:81:84:6d:c5:32:e1:15:02:19:82:40:43:
14:be:1b:e4:25:b2:ea:f9:de:dc:eb:11:8e:8b:b7:
e2:c7:a4:b7:99:89:88:03:2c:30:09:4f:10:3d:fd:
1f:52:c1:f1:98:70:20:20:c4:e7:08:52:46:c2:93:
52:ad:24:dd:b7:a7:9b:f7:d2:47:85:b9:2e:cd:d9:
fb:49:85:6a:7c:a7:51:e7:6e:80:5a:aa:2e:fc:aa:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:CC:70:31:B9:64:7D:82:09:85:EA:40:23:5C:7B:97:2D:23:97
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:05:47:c9:f2:cb:80:67:71:6b:f8:dc:16:b8:33:27:4d:02:
ee:83:b0:d1:49:c8:89:19:5e:d4:4e:31:f6:b2:a0:3b:fe:5c:
de:68:37:ff:0f:2f:6a:64:b4:05:5f:9d:89:c8:dc:fa:4f:18:
4c:16:5d:7b:43:13:ec:c3:0b:0d:22:0d:38:79:28:ee:33:c6:
95:0f:65:bd:3c:91:dd:3c:78:12:bd:05:b3:4a:8a:f9:2d:56:
4d:41:f3:92:5b:98:91:81:92:8e:5e:75:e2:60:04:3b:19:66:
66:6a:5f:c1:41:9d:0f:6d:a0:74:12:3b:f4:76:5d:03:54:82:
8b:97:fd:b8:92:72:14:41:fe:cc:a4:4d:3b:0d:2c:97:9f:c6:
ad:1c:8a:68:b7:5b:05:6c:d8:99:a0:41:ac:02:31:e4:cd:87:
5e:b7:c9:84:18:40:5d:2d:aa:79:2a:fe:f8:23:51:5c:98:9a:
3c:b9:cc:70:f5:4f:e2:f8:0e:df:87:e7:06:1f:c1:e4:a9:9b:
8b:87:21:20:b0:91:b9:ce:a6:5c:3f:65:7c:cb:a1:6b:66:9e:
73:76:b1:0e:76:49:d3:b7:be:e7:ab:bb:9c:f9:4d:3b:b6:c0:
82:e7:96:8c:b4:4e:80:7a:ce:08:0b:59:47:a9:a7:31:19:34:
e2:8d:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:48 2025 by rpki-client