Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 4aicwEVzc2zNY+NS1QULGYf0/0FwbmEbwvQvJxctVY8=
Subject key identifier: BC:1B:8A:FA:EB:72:C1:24:89:60:8D:AC:E4:22:60:C1:42:4B:6A:91
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0198D58404A46B6DA1C6DF9C58FA099D57C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0512
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: Qve89PUaNv/Au3pT46dN66Lq8uFEOL3VFwPeij+gaQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:04:a4:6b:6d:a1:c6:df:9c:58:fa:09:9d:57:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=bc1b8afaeb72c12489608dace42260c1424b6a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:1a:0a:48:9c:93:48:11:a7:40:49:89:5a:
0b:a1:b2:8c:a1:63:97:60:a7:79:6c:a7:30:12:74:
ab:0f:9a:bf:70:88:5e:fd:6b:09:48:aa:b1:dd:48:
94:35:f2:a7:7d:f8:61:cb:dc:9d:31:e8:e6:b8:bf:
e3:f8:ca:a9:a5:6f:bc:8e:20:ec:93:ac:5b:4b:c3:
15:68:39:98:16:b6:86:a5:54:19:93:aa:96:4b:1c:
89:b9:ca:5b:26:2a:96:ea:7b:8f:42:b0:18:1a:8c:
f6:86:3e:95:8d:e8:d2:fb:73:c1:c1:51:75:fb:05:
d9:79:5e:64:90:d7:9e:a6:eb:80:eb:21:d5:46:c6:
4c:11:da:20:63:69:77:08:4b:5f:08:9e:0e:18:fa:
80:a6:c4:e2:9d:21:eb:93:7c:a0:ad:9b:37:90:a5:
c3:ed:ea:8e:5d:f6:a9:8a:d5:6c:bd:7d:a0:2d:d5:
38:b8:57:ee:ac:6c:41:19:ad:9e:15:e0:99:c4:29:
7f:63:7c:2e:d3:5a:26:5e:4d:12:5d:f5:8b:1e:c4:
f5:3c:ca:fa:bb:fd:41:3f:a2:bc:7d:82:81:e3:d8:
9c:18:7d:37:3f:91:11:3b:43:bf:83:65:c1:4d:b5:
ae:9d:95:a6:ee:5c:70:8e:3b:54:9f:0a:6e:0e:ff:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:8A:FA:EB:72:C1:24:89:60:8D:AC:E4:22:60:C1:42:4B:6A:91
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:aa:b8:6c:d7:9b:2e:f0:05:ca:ed:08:d2:2b:bb:43:19:0d:
43:df:8f:24:e3:25:0f:c5:81:e3:cb:b8:1e:c0:e6:a6:7c:2b:
a1:c9:56:c6:e3:ed:d2:01:61:04:c0:ad:30:7f:75:2c:73:a2:
e6:97:9f:a8:03:12:35:6a:b2:f2:c9:7b:d6:e3:f3:20:2f:f2:
58:8e:f6:19:44:17:2b:dc:0c:ff:5e:c6:aa:fb:48:c4:a3:62:
27:93:95:01:b1:dd:f5:7c:b0:af:35:09:d6:6f:45:9f:35:7b:
a0:97:4a:40:33:64:58:03:1a:c2:63:b7:92:1f:ef:ee:6e:b6:
6b:10:b0:41:7c:94:39:83:0e:a2:d9:ff:d1:a5:6e:f4:00:10:
78:7f:f0:3e:01:7f:05:66:e5:25:a2:f4:a3:7e:e8:57:c3:f6:
57:24:32:28:69:d4:61:27:6c:eb:6d:7c:cc:04:b5:d8:f7:4d:
6e:e7:a4:00:c7:0b:be:7a:e3:da:fb:7a:b6:34:15:8f:4d:a4:
ca:28:96:70:4d:44:f2:f0:2d:c3:47:f5:ae:75:db:10:04:0f:
c5:f2:6d:04:b6:28:94:e6:8d:17:e8:df:31:b7:f7:88:8d:96:
1f:70:f0:02:1f:8f:1d:86:07:37:c2:c6:d0:d7:de:c9:0a:1d:
1f:f6:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:18 2025 by rpki-client