Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 6i/MvypUTyG0GghzJv/9og4JHL+NAMJ4Yf9aTCXZXNE=
Subject key identifier: E8:44:1A:4E:AB:B4:2F:04:9A:DB:E1:63:BC:EE:D0:C4:40:DD:2D:47
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0197B7B32119D779A7B11E5EDC678FBFBC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 047E
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: EB2PVrZ8PyoMPsdQkzfAp7/ATCbbI6RyYH4KFGrGzeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:21:19:d7:79:a7:b1:1e:5e:dc:67:8f:bf:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=e8441a4eabb42f049adbe163bceed0c440dd2d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:62:21:51:41:1d:ec:2b:4a:65:7c:71:55:
a1:6a:20:4c:03:74:44:08:15:56:9e:92:67:31:27:
a0:bd:12:5d:59:7a:42:57:5d:ec:aa:c4:14:35:00:
c8:0c:b5:7f:41:a5:71:7d:08:ce:0a:e0:de:08:1f:
68:69:c9:9a:8d:60:4f:5f:0d:6e:c8:de:76:af:b3:
b1:04:36:fb:52:22:7d:f3:d5:83:23:39:d7:60:de:
24:bf:af:fc:66:aa:7e:20:03:19:4c:42:25:8a:05:
28:b0:0a:ee:82:0e:3a:f8:12:f9:e0:e8:2c:83:58:
2b:9a:96:13:69:a7:80:ab:0b:f7:5d:a2:39:20:29:
1e:16:51:38:cd:5b:47:ff:d6:4c:1e:d3:8a:9f:f7:
d0:be:82:77:2c:4f:3e:bd:3f:0c:fd:18:9e:4d:0c:
3c:3a:3b:ef:1d:9a:82:8b:1e:95:69:7d:48:1f:a9:
e5:12:0b:ab:ac:51:76:98:6f:d6:73:d6:19:0c:1f:
b6:44:32:6c:5e:0a:5c:67:2d:ab:50:95:1f:62:9d:
1c:6c:18:1e:68:55:21:43:9a:0f:f5:c4:40:1a:fa:
4e:ea:8d:f8:bf:e9:7b:62:c9:b3:a8:3d:c6:22:26:
f7:24:92:fc:b7:c9:ab:9d:28:c8:b2:19:5f:21:08:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:1A:4E:AB:B4:2F:04:9A:DB:E1:63:BC:EE:D0:C4:40:DD:2D:47
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7a:5e:b5:43:c0:df:e6:8b:a7:16:05:20:29:45:81:b5:f3:
3d:bd:0e:44:9f:54:a8:c0:ab:38:b5:4c:d4:0e:f5:85:8b:15:
7a:e0:f8:9c:1e:43:4f:52:55:78:c2:8c:0d:35:ac:b9:5d:3e:
7d:db:71:d3:33:44:f3:c5:f4:b2:5c:b9:d5:97:4c:11:a0:1e:
98:7a:a1:3e:04:8a:81:79:80:53:94:95:6a:0c:bf:34:87:8e:
93:75:0e:92:de:66:9f:df:31:0a:a0:d6:ff:b7:df:11:d7:b1:
e2:d4:f1:3d:9f:f7:de:f6:2f:9c:fc:8e:01:b7:9d:52:e7:2e:
77:d7:2a:8d:4f:cc:91:8b:f5:fe:0a:f0:b4:f5:ed:87:2a:63:
d9:db:e3:52:a0:32:16:49:2a:ee:c8:fd:af:43:67:54:81:74:
04:1d:d2:62:ad:4c:d2:2a:51:04:18:b0:d8:a8:3d:0a:c2:8e:
9e:30:0f:b3:b7:ef:16:d6:07:b5:29:f7:3e:92:97:ae:0e:0c:
d4:64:f7:00:1e:cf:25:ef:f1:0f:08:ff:84:50:01:5d:93:df:
19:d6:6c:b7:a8:6a:9a:5c:2f:e1:48:ba:e1:e5:52:ca:10:4d:
ac:31:e0:98:d8:b2:ac:8e:4f:7c:6f:0d:4c:02:c3:c8:5e:c0:
cd:ee:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:54 2025 by rpki-client