Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: O4QtFlscwGA3gU7OCNgf3SNpmpL18flWwSMmgJnBGGQ=
Subject key identifier: 63:A6:7E:ED:94:01:A8:13:12:65:C9:00:DD:BC:68:F8:5E:31:73:86
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 0198D4E0288E87F967DD652EB4CBB60F8409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 0E50
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: C+H8hEEy7epqaT5z5fStDo9FoTDBUFVBLSNkbykmLrQ=)
2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:28:8e:87:f9:67:dd:65:2e:b4:cb:b6:0f:84:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=63a67eed9401a8131265c900ddbc68f85e317386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:e2:fe:f7:cf:2d:87:2c:8e:05:e5:fc:4e:
21:cc:14:2c:2a:2a:01:12:98:c9:54:00:18:c7:bc:
4a:69:26:08:02:a5:34:48:88:4b:b9:99:54:ff:51:
21:7e:08:d9:06:f3:82:2b:b4:17:09:ee:df:54:7f:
02:34:ad:e5:b0:94:7c:7a:ba:97:2a:99:1c:f8:7e:
ef:5e:bd:dd:4e:7f:c6:fc:2b:0f:41:d6:af:a9:66:
e0:cd:b2:74:79:01:a5:7a:8e:d0:45:0b:e6:9f:13:
68:5e:9c:7e:ca:5d:b0:fa:a5:b8:bb:9b:1c:7d:35:
20:3f:3b:69:a0:fa:08:34:58:58:db:d7:be:2f:87:
8a:ce:d3:c0:25:9b:0b:14:8b:a5:dc:28:89:09:45:
45:bb:cb:df:59:17:f1:bb:36:33:db:06:c1:76:be:
55:7f:fc:2c:ee:3b:8d:ce:28:7c:79:94:ea:f9:1e:
39:21:a0:27:cb:9d:03:23:5a:86:27:38:1e:79:e2:
10:7e:62:61:78:e3:6d:4d:d6:59:0a:98:cf:fb:08:
00:1a:cf:7d:78:7f:01:df:9f:0a:f5:4c:d1:5c:68:
60:87:ff:ec:ef:a1:d7:0b:52:41:b8:0b:c4:2f:f8:
61:f2:2d:63:72:44:07:1c:2e:09:84:63:b1:30:0a:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:7E:ED:94:01:A8:13:12:65:C9:00:DD:BC:68:F8:5E:31:73:86
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:85:e0:3a:e7:3f:c5:e2:f4:3e:4e:fe:bd:24:4f:9b:6a:
27:99:78:7f:cf:fc:fa:71:7b:97:0a:fd:aa:06:37:4b:ce:44:
b0:26:03:17:d7:84:31:8a:76:6e:b0:d9:52:bc:25:f8:69:c4:
8f:ee:df:b7:62:bb:0f:c2:c3:ae:eb:57:97:fb:ea:9e:c4:d1:
ec:a3:dd:97:4b:d5:83:be:6f:c7:f1:6b:0e:92:4c:6e:4e:e4:
23:78:e1:6e:28:f5:6e:54:97:25:8e:05:73:46:dd:22:58:43:
56:51:3b:2d:0a:0f:cc:ca:c1:9d:20:16:64:ce:b3:f0:fc:6d:
b3:08:33:b3:18:76:42:04:37:4e:9d:e5:8a:de:20:9a:46:ba:
87:06:26:05:34:7a:77:4a:7f:9a:4b:c1:e3:9f:e1:eb:13:a6:
5d:2a:70:b6:c2:0e:51:8c:11:62:01:61:58:da:b8:8f:61:87:
c9:76:c6:ce:39:bb:ce:b4:f2:61:f3:b7:c4:5b:44:88:f6:b2:
29:1d:ad:66:11:9a:2f:f9:8e:90:03:18:04:97:90:57:87:1d:
51:d4:ab:d7:c0:f3:50:6e:7c:a4:db:86:d8:98:a8:6a:ba:94:
11:52:b4:6f:ed:3f:3f:fb:30:56:b1:ba:13:95:b8:87:28:04:
d7:38:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:02 2025 by rpki-client