Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: COibjckAEFOltDQu+nZdekzmxxMHjccCsS3bmznsako=
Subject key identifier: 39:39:44:35:DE:8C:6E:6F:B5:0D:CE:C8:11:E8:63:00:98:B4:03:D9
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 0198D5F178732ED5CEC4D31825BEAECB84CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 0687
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: 8DIdwO5isbs7SWtKa5RYejnW5BIDI5WZ/1omdMBxGQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:73:2e:d5:ce:c4:d3:18:25:be:ae:cb:84:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=39394435de8c6e6fb50dcec811e8630098b403d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:81:b5:ac:ff:77:cf:54:ca:25:4a:6d:02:
76:b8:50:36:ab:b4:0a:18:2b:cc:d0:dd:5c:a5:0f:
34:57:40:87:9b:4d:8c:eb:13:57:cb:99:2a:ce:d8:
d4:b1:b6:09:ab:8f:be:73:30:17:9c:b9:ce:48:66:
6b:85:d7:e5:6c:d5:93:20:68:ef:94:82:91:f7:ce:
10:72:ac:48:c6:00:c8:a1:4c:b3:de:c2:bd:28:40:
00:88:15:55:d4:2b:aa:b9:cc:a0:8c:8f:26:e8:66:
de:87:ff:ea:02:aa:d7:eb:0c:ba:5c:0d:77:27:19:
c6:42:5d:c2:f2:22:49:20:5c:4d:0d:b5:c1:61:16:
17:a1:8f:14:3b:76:c7:a3:8d:fc:98:e3:7c:76:79:
ed:c9:65:5a:3b:d3:d2:df:bd:10:9d:d5:fe:1c:91:
3f:22:2f:2e:ea:95:80:f9:4f:f3:4c:f5:4a:82:02:
32:b2:67:ad:70:cc:66:7d:e3:00:b7:3c:56:72:08:
a8:1b:b9:1a:68:af:ee:aa:72:5f:56:05:7e:1e:28:
94:aa:90:a1:a5:66:e2:10:5b:61:22:9b:90:e8:58:
a4:78:80:63:c2:89:39:23:c9:a2:93:15:23:89:a5:
58:21:c0:cc:40:14:20:54:ff:3c:cf:6c:39:de:b4:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:44:35:DE:8C:6E:6F:B5:0D:CE:C8:11:E8:63:00:98:B4:03:D9
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:95:06:4b:0a:8a:27:a5:75:b8:da:64:f2:b0:12:32:61:
cc:46:33:24:a7:e2:28:80:05:57:6d:12:27:d4:c9:01:fd:9a:
34:c3:be:ab:c3:28:f8:fc:cd:a1:95:40:ef:56:f4:91:3e:52:
94:fb:10:57:54:06:bc:6f:2e:f5:3b:76:cd:8a:42:6e:f1:0a:
bc:87:a2:60:e0:d9:2e:46:1f:2b:62:6b:d4:17:e3:1b:de:03:
81:ff:ca:fb:3e:ca:2a:42:c9:83:ad:4d:86:1c:58:55:14:09:
4c:dd:f7:fd:fc:1a:42:23:34:e7:de:00:fe:14:df:9b:fd:60:
c8:a5:6a:18:4a:59:d0:dc:1c:01:5a:80:d3:d8:ad:5a:dc:c5:
47:71:21:cb:80:ec:b0:ee:ce:73:97:ae:f3:53:14:b1:f5:0b:
fa:14:39:13:f6:62:f0:55:21:83:56:f6:2e:dc:bf:41:d2:2f:
6e:20:75:5a:b5:b7:11:b8:9a:f2:ed:dc:7b:cc:44:5b:f2:a7:
1c:8c:19:dd:bb:cb:64:bb:41:e2:aa:10:94:4d:5c:f8:9d:08:
97:57:c4:2a:a2:c1:9c:3b:72:7d:ad:63:d9:88:fd:5b:78:f8:
c6:77:c3:d6:27:41:c6:45:b5:db:4d:17:79:be:af:64:8d:29:
27:b3:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:39 2025 by rpki-client