Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: 9j8pdQv2vekBiGBVr7kn2LQQ9DU7RyCIAGXLzGIoLkw=
Subject key identifier: 9F:15:69:59:88:E0:C1:05:0E:8D:81:6A:B6:2C:74:FF:60:82:3F:BE
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 0198D7E1620F7707458BF395D555D84E67BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 125A
Signing time: Sat 23 Aug 2025 17:02:08 +0000
Manifest this update: Sat 23 Aug 2025 17:02:08 +0000
Manifest next update: Sun 24 Aug 2025 17:02:08 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: XDtIGnV/YYe1g84OsJQSIic4FRzCPEgHnXCtiALsnPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:62:0f:77:07:45:8b:f3:95:d5:55:d8:4e:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Aug 23 17:02:08 2025 GMT
Not After : Aug 24 17:02:08 2025 GMT
Subject: CN=9f15695988e0c1050e8d816ab62c74ff60823fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:22:4e:f7:ce:54:90:66:5b:2a:54:92:79:
fb:18:b2:d2:25:3c:a5:92:f5:57:44:b1:76:70:1c:
c2:ca:f7:e6:38:49:72:3e:68:c1:1e:72:3f:8c:39:
5e:fc:8b:c7:39:41:50:fe:eb:70:3a:06:7c:a6:d9:
23:ff:33:1a:d5:49:d6:fc:8d:d2:29:11:6e:5a:ac:
0b:23:c0:1c:d6:9c:df:e6:e8:9d:1a:7c:14:96:2e:
ad:64:fe:05:01:a1:c8:b8:24:e0:93:57:f2:c1:88:
7f:74:e3:17:2f:73:83:ca:49:a1:60:e9:c4:36:69:
f9:d5:7d:b7:c4:b0:58:74:e5:6f:f1:e6:ba:b6:7b:
8f:9b:4b:14:88:84:6e:02:82:58:71:c5:72:9b:29:
91:38:5f:1f:3a:cb:7c:ab:21:66:fa:5e:39:ba:1a:
7b:7d:74:d9:59:38:ab:21:e2:b6:80:5d:07:9d:1e:
29:8f:bf:cf:78:64:e8:f7:62:4a:50:b6:9c:c4:db:
28:2f:3d:05:7b:5e:02:c5:39:54:06:a9:7c:2c:0d:
58:b4:60:5b:d7:75:36:69:aa:26:a7:99:51:3f:ac:
c1:ff:af:60:91:ef:d2:81:f7:61:f2:bf:c1:10:57:
79:88:d5:e1:dc:5d:87:77:fb:d8:ef:bd:64:2e:84:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:69:59:88:E0:C1:05:0E:8D:81:6A:B6:2C:74:FF:60:82:3F:BE
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:97:9a:85:ef:ab:25:bf:05:d7:5e:96:b1:fe:c0:cc:ad:
3f:2b:aa:71:3c:cf:e2:4b:f3:6b:3d:42:ed:2d:b0:46:f6:c1:
58:14:13:e6:f6:01:59:a2:5a:5d:91:bc:87:9d:15:0f:5c:ac:
9b:72:41:20:5d:fe:2c:be:6f:9d:0b:af:0d:6c:0e:4f:2c:fb:
6f:10:ca:7f:38:2e:aa:06:91:08:f5:c3:d5:05:06:68:96:44:
4d:f9:76:9e:af:ee:ec:2f:3e:9c:aa:50:8f:b5:82:db:c1:86:
f3:73:36:e9:7f:e2:f8:d5:4b:39:37:6b:2d:f2:7f:08:e1:8d:
ae:62:53:3e:3e:28:c0:00:2f:57:a5:88:f1:a7:61:f4:45:c4:
4c:08:31:28:c3:a4:96:11:06:5b:37:60:66:4d:a7:55:f0:c9:
cd:0d:cd:15:85:6d:c1:dc:f8:b5:f9:b7:56:b4:dd:0c:95:d9:
5e:cb:1d:f4:8c:cb:3c:97:ce:46:2f:a2:47:f4:2d:b6:84:20:
ba:36:c2:b0:4f:78:4c:20:d9:0a:c0:08:07:58:8a:b7:5d:40:
62:ac:d6:77:b6:01:86:2f:19:6b:d3:55:5b:fb:b1:11:bb:72:
85:f2:4f:bc:f5:26:10:40:4e:d9:34:4a:56:78:97:f2:61:a8:
99:b3:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:56 2025 by rpki-client