Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: mlC47n2UYjpsXIN0MluVJK4UrAQOxO2JpzzDnopzVdg=
Subject key identifier: E2:64:AB:5D:B3:55:7C:DF:13:FB:D5:0B:A8:6A:EC:10:D3:DA:5E:0A
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 0198D583ACC83665ABE1169979D6DD019539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 12DF
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: VyW4TtwafsqqLO/Q/a/EgZeAMg4Eaz7EQZKvtvvUx9c=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ac:c8:36:65:ab:e1:16:99:79:d6:dd:01:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=e264ab5db3557cdf13fbd50ba86aec10d3da5e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:dd:a0:31:d9:17:fd:62:08:1e:49:00:42:
4c:53:42:8e:72:30:0a:68:6f:41:d6:11:9d:22:cd:
5e:03:ec:9c:cf:04:c7:7f:d0:07:ef:47:67:3e:33:
70:4c:0f:a4:77:a9:f9:97:7f:43:51:9f:09:b4:4d:
ca:32:39:9c:2a:32:92:3b:46:1c:da:f9:ab:a6:bc:
57:13:b1:00:7e:75:22:57:eb:b9:27:20:2e:f9:48:
00:9e:8f:81:be:4f:40:30:e6:f6:34:de:54:6b:6b:
a9:e0:81:4a:fe:9d:87:5a:97:4e:09:33:09:c7:26:
66:04:16:96:1a:e4:bf:8f:ed:f6:e8:50:a6:b4:20:
5b:4d:ad:ab:fa:3f:e1:36:ae:a7:c3:d2:d7:b3:47:
ea:cb:98:d3:31:91:c2:28:13:15:17:91:4b:0e:46:
92:c6:5e:79:10:7c:ed:ec:3f:f4:23:0a:c9:c6:fd:
5e:84:7c:b1:4b:c3:28:85:7f:02:77:24:37:e8:09:
42:9d:d3:81:d2:03:12:ef:7f:c8:8f:59:59:7c:56:
39:62:b9:6a:11:f8:f6:bb:3c:c5:b7:3b:27:7f:55:
4f:17:fd:64:2b:0a:60:e6:47:d7:a6:4c:ad:51:6a:
95:95:59:78:f0:97:b3:d5:81:3d:7e:51:df:31:e3:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:AB:5D:B3:55:7C:DF:13:FB:D5:0B:A8:6A:EC:10:D3:DA:5E:0A
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:9f:91:66:e3:ff:61:ee:ad:c0:7c:3d:1f:53:65:aa:9a:
b5:be:ba:39:c5:b9:c2:3d:b9:bb:5b:d3:a4:a9:d6:36:50:d1:
32:40:eb:88:bb:0b:f1:d9:8d:2b:73:56:c6:a4:73:f1:57:49:
5a:88:3c:c3:8c:02:22:9a:25:50:21:03:91:a9:44:4e:ae:8e:
cf:8d:ba:c4:5b:60:4b:a4:98:7c:4f:48:36:67:90:18:c9:22:
f0:15:bb:af:9a:f9:1f:31:7f:91:c7:90:1c:a7:cf:2c:4d:26:
7c:a3:64:2d:ae:2b:14:b9:27:13:5c:45:f3:f5:42:48:66:df:
8d:9d:c4:90:a9:66:79:9b:d2:91:53:54:47:e9:d0:88:a8:62:
7b:6e:c0:1d:02:65:f3:5f:56:a0:57:d7:02:1a:84:28:75:cd:
62:e8:67:a0:e1:d9:85:d4:3b:b8:2a:82:2a:b0:87:b4:60:05:
e3:b2:cf:9f:69:c9:31:dd:47:01:08:59:a5:41:e8:c4:f0:b4:
d3:bf:2e:2d:3d:25:ea:d8:be:de:11:e1:7c:95:94:d7:e4:07:
39:39:4d:74:82:2b:15:fe:50:ec:12:77:a0:87:ce:80:e1:78:
23:5d:e3:64:01:e8:b7:c1:d9:82:50:66:d0:7b:9d:f9:e7:6f:
13:2a:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:18 2025 by rpki-client