Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: hSKUq/5/nwVNvAsQjXRFIppPaKBeGZhM7+ojYx8L3wE=
Subject key identifier: 84:4E:62:6C:7A:A5:23:AE:CF:F4:D9:CC:37:9D:9F:A1:23:5D:20:3D
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 0197B82116FB5F71AD384253D8CFB7EC463D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 11C5
Signing time: Sat 28 Jun 2025 20:01:05 +0000
Manifest this update: Sat 28 Jun 2025 20:01:05 +0000
Manifest next update: Sun 29 Jun 2025 20:01:05 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: rT3P6mlmZn5llP+LRjeYsYqEeA8C/Oevyq999w4teE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:16:fb:5f:71:ad:38:42:53:d8:cf:b7:ec:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Jun 28 20:01:05 2025 GMT
Not After : Jun 29 20:01:05 2025 GMT
Subject: CN=844e626c7aa523aecff4d9cc379d9fa1235d203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:a8:76:ec:4d:72:04:b6:14:d5:7c:7c:40:
55:90:50:d2:7f:bc:f5:c6:6c:a7:f2:52:b2:36:29:
c0:77:76:6f:f5:0b:82:7c:44:05:95:67:33:1d:48:
55:d6:de:9b:51:e3:5a:78:16:fa:ed:da:a6:78:ef:
bd:12:01:32:01:58:b9:c0:52:e7:e3:f6:8f:00:a5:
44:98:8d:75:fb:7b:7c:54:b0:08:4a:1a:73:b5:67:
7b:b1:5f:b1:3c:55:81:88:39:34:8d:87:0b:ab:91:
06:42:56:0c:56:34:f3:15:ae:59:b0:45:ff:01:aa:
fe:0e:ec:83:66:65:b9:e3:02:0a:ba:9a:e8:40:06:
0c:60:35:d6:b0:b1:09:22:9b:ff:06:be:a8:db:df:
4f:c6:c9:3e:4c:06:48:5e:60:28:fc:e8:3a:d8:6a:
30:5c:f2:62:f5:99:37:c5:7b:bf:b0:53:fd:c0:4d:
eb:29:2f:b2:c3:71:bf:92:a0:2f:5b:38:b3:35:fe:
37:6e:43:8c:c5:17:68:28:1e:65:b8:12:8b:2c:3e:
71:36:03:a9:e6:61:9e:16:04:80:65:ba:54:88:96:
26:85:05:bf:79:85:7c:98:09:8a:af:8e:dc:60:8e:
6e:d7:ae:aa:89:0b:81:72:31:31:b2:34:d0:ac:23:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:62:6C:7A:A5:23:AE:CF:F4:D9:CC:37:9D:9F:A1:23:5D:20:3D
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:83:e5:47:7b:a3:31:12:d6:e3:16:04:bb:78:17:94:e7:
67:97:45:72:21:ef:8d:3d:39:1b:70:ef:38:e1:28:8a:06:40:
d1:09:8c:c9:24:bc:7e:54:14:43:0f:62:07:b2:53:81:1b:dd:
a6:9f:3f:18:51:f0:ce:3b:96:06:fa:e0:31:90:5b:aa:9d:f0:
1e:91:22:6b:03:18:fe:cd:3a:78:8d:b7:83:88:8a:d8:05:39:
e1:32:c4:37:92:36:dd:90:76:26:ae:d5:ab:3d:4b:c0:a1:43:
62:66:32:5d:4c:ef:f6:14:a0:7b:67:6e:1b:f0:89:28:b3:7b:
d8:53:48:66:b7:01:38:c0:34:5a:db:ca:fa:78:29:31:2c:be:
2f:64:ea:f5:27:12:57:e5:dc:45:e5:91:d0:d5:a3:97:c0:42:
23:c2:f4:62:80:7e:fe:59:bd:b9:93:e4:c0:fc:ee:12:05:19:
2e:81:85:3b:6b:ca:47:af:b1:51:d4:b8:d6:64:88:e3:1a:b0:
bd:17:a3:70:de:dd:09:28:fa:46:6c:c9:77:a0:13:39:49:c2:
56:a9:6f:7d:cd:be:ed:4b:63:89:48:cb:9f:cf:45:f7:f9:7f:
fd:74:61:d1:9b:f2:0e:0a:41:a4:0c:43:28:53:44:79:09:5a:
0a:3b:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:41 2025 by rpki-client