Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: 0RyaZuSbLENDArU6OKqjN2v+43tvmvQxxupIrOC/n7c=
Subject key identifier: 08:08:AC:C4:11:0D:72:F5:38:CF:44:49:1D:AE:58:EA:39:AA:FB:E0
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 0197B70E9025C92FAE85E93A3C7D91F2A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0BB4
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: jfGaToaPFeX+5FZGrNhlHBwcKP1VkyiNZzmbuxz8sOs=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:90:25:c9:2f:ae:85:e9:3a:3c:7d:91:f2:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=0808acc4110d72f538cf44491dae58ea39aafbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:a7:be:46:fc:6a:34:16:14:89:c2:53:ad:
dd:75:0d:85:b2:33:32:b7:c9:45:06:70:ed:21:86:
b5:e2:c6:ff:c1:18:be:8a:fa:4b:43:53:e4:00:00:
64:b9:a8:dd:59:00:46:18:ff:c7:60:f3:cc:d2:9e:
4c:29:b8:30:41:69:c5:8a:6d:89:6b:4f:f8:08:3d:
9e:97:f2:55:eb:68:ce:91:e4:6c:1d:5c:d1:c1:ae:
98:e7:92:5e:ef:0e:65:65:89:e2:1c:eb:6a:16:d7:
ed:db:3f:49:2c:17:c5:51:30:b3:21:5a:e8:f6:ed:
05:45:c6:90:2f:1c:8a:d3:82:c3:b2:c4:ba:ee:ba:
9b:75:ec:8f:db:4d:4e:7e:c9:f3:bc:56:0b:ba:53:
8c:ef:42:a8:13:c8:1e:43:fc:eb:47:3f:fd:92:f4:
2b:c4:31:29:24:1d:af:82:be:aa:e4:8e:ad:f7:bc:
a8:70:35:d7:a8:99:c8:68:13:4b:8f:7f:89:53:90:
ca:69:75:44:7f:2a:e9:22:83:98:a0:cf:5e:96:6c:
0a:cf:fe:c2:25:cc:79:fa:e7:32:23:ac:06:2f:5b:
d4:66:50:73:88:f4:bd:e2:89:a6:47:a5:a6:cb:47:
6b:bb:8f:5e:cf:bc:b5:da:b1:9a:8a:d0:46:c5:c4:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:AC:C4:11:0D:72:F5:38:CF:44:49:1D:AE:58:EA:39:AA:FB:E0
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:24:00:b9:5c:66:bd:69:c6:ef:20:1a:cb:75:d6:23:1c:
01:55:63:14:66:e0:76:e4:56:4a:97:6a:55:02:34:82:e9:c3:
1f:7c:a6:b5:6e:f9:f4:88:0a:a2:8a:14:0c:e3:24:ad:53:d8:
b4:7e:f7:c5:3b:2d:cf:32:c1:5b:47:39:48:58:47:17:0f:c9:
58:9b:ac:8e:a1:38:b2:ea:bf:2c:52:e2:42:46:20:1d:02:c1:
70:38:ad:5a:d5:78:f4:52:4e:6c:74:d6:c2:e3:6b:b0:c5:68:
c7:07:72:3b:be:13:88:d6:b9:b6:be:3d:e6:45:f8:cf:33:09:
24:e0:b6:8d:3d:82:4d:a8:62:5f:b6:b7:81:d9:2e:0e:b1:6c:
3b:0d:87:16:a4:d3:4a:16:fc:66:ae:c1:98:c6:8f:b8:33:92:
1a:42:a1:39:af:8b:44:64:82:bd:6a:3d:20:48:8d:a7:d1:6b:
39:d4:7b:e7:88:2c:4f:ad:36:81:17:d6:35:d3:b2:87:d4:6d:
74:eb:f8:a7:de:28:2e:d5:ad:19:5e:c6:34:99:21:98:03:f5:
7e:60:9d:82:ba:98:08:be:e7:cc:c4:2d:5c:ed:fb:07:e4:40:
92:24:83:97:ba:25:aa:89:29:ec:51:1c:91:e5:d8:c6:99:65:
0b:02:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:23 2025 by rpki-client