Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: DPiyp/NSbtq0z+8dpqZUPKzhCeGKXx/F9S1odcOAoVo=
Subject key identifier: 93:23:FD:51:8A:C6:48:C6:CF:5D:82:23:1A:FB:CA:28:FD:E3:91:34
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 0198D4A7D362F68EC7C0EE534215B4AD62AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: drh7Dtoz4nWiCeEOVW7Jr9+5ZjFwkUchctRVZTf4i+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d3:62:f6:8e:c7:c0:ee:53:42:15:b4:ad:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=9323fd518ac648c6cf5d82231afbca28fde39134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:22:ac:86:12:57:b8:03:7b:07:a7:55:2b:
96:fa:be:05:c2:b6:fb:e7:3b:28:fd:bc:ad:eb:6c:
cd:0b:4f:84:35:33:da:ef:fb:05:f2:2a:b4:b6:51:
40:e0:e1:38:70:90:db:08:67:3b:cb:28:fa:b0:ac:
73:d1:1b:c3:03:73:85:fa:b9:55:3c:0f:7f:6e:f6:
85:5e:d4:f4:4f:d1:14:b7:6f:ee:7d:04:53:aa:3b:
69:a4:be:99:5d:45:ef:de:f7:37:ce:4a:0f:3e:78:
8c:2e:f1:41:f2:bb:5a:50:0d:a5:c1:73:64:de:30:
c6:33:66:61:54:9c:f0:bd:7c:c4:30:f3:c5:e7:6a:
45:91:9f:4a:e3:c2:de:93:25:73:9c:41:49:f8:51:
84:ab:67:be:01:5d:71:e1:53:18:6e:2e:48:10:ca:
85:65:aa:8c:70:81:53:3d:0c:fa:a2:c2:0b:8d:66:
e9:43:5f:95:d9:db:19:75:dd:5b:f9:6f:e8:0c:19:
4a:c1:7d:70:dd:9c:1e:69:70:22:b2:ba:4f:6f:ee:
44:5c:21:51:9e:30:ff:14:87:e3:d1:b2:d2:86:06:
37:7b:39:88:39:3f:0d:b4:e4:ab:bc:4e:56:90:5f:
36:8b:50:0d:fe:51:f4:b3:6c:79:56:77:da:f4:bd:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:FD:51:8A:C6:48:C6:CF:5D:82:23:1A:FB:CA:28:FD:E3:91:34
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:86:da:e9:55:4a:40:13:fa:b7:d3:11:da:0c:4f:ff:6c:
bf:de:dd:37:42:30:43:73:98:85:f7:48:4b:8a:92:e7:79:05:
b0:0f:25:35:f7:7e:d0:7e:96:d5:e4:d7:51:c2:16:3a:0b:94:
49:31:c0:b3:bf:9f:e0:50:bc:ef:7b:6c:c1:c5:e0:e6:ad:95:
ba:84:bd:f7:61:f6:8e:bc:e4:33:c5:32:af:bc:48:5b:7e:6f:
0c:9a:68:5c:8d:bb:3a:34:fc:66:00:5e:44:c3:fc:86:36:c7:
fc:88:84:2a:d2:60:7f:a8:a2:ca:7a:8b:c6:0c:ef:87:f5:76:
2e:4a:8c:41:da:9a:95:00:4d:d6:7b:f9:21:1f:ab:5b:50:08:
44:b3:24:b1:27:4c:e4:07:b6:ae:3e:30:17:f1:01:70:79:44:
5e:83:e6:93:1e:13:d4:c1:1c:b1:ef:f4:87:46:48:f8:94:7c:
95:a0:dc:7e:61:47:64:22:59:0a:a2:9b:1a:06:ac:f9:0f:66:
19:e9:56:d1:b9:f6:78:f5:e2:d0:16:6e:9a:a7:1e:e0:ca:f4:
cd:bf:3d:05:fe:3c:7c:5d:c8:a5:54:05:24:7b:26:0e:f3:92:
94:75:6a:ef:6f:53:60:d9:81:a8:51:c9:c7:d6:85:5f:8e:f9:
93:aa:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:19 2025 by rpki-client