Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: J0XTOki6BCup4IlNrAIcBJZG9rfJgWliD8QsA6bHakw=
Subject key identifier: 05:CB:69:B1:F5:DC:E9:21:12:CF:92:3E:E9:5D:9E:F8:0C:E1:9C:25
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 0198D54E8B9B5F8AFDAA1F7916975086CA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: S/y0OyuMf/EedfjYwnNpLgHe+gq1tNfX/Jba1An5oyU=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8b:9b:5f:8a:fd:aa:1f:79:16:97:50:86:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=05cb69b1f5dce92112cf923ee95d9ef80ce19c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:f4:ed:7e:3f:2b:c3:c9:cd:1b:05:f7:f9:
7b:0c:96:27:5d:3b:2f:3d:ec:a6:73:82:5f:36:7c:
2a:f5:44:7a:77:4e:fa:60:5b:c6:c1:24:79:cc:2e:
5f:a7:ec:56:76:09:ac:4d:cd:a4:a8:24:28:70:88:
99:f0:ee:1b:4f:b8:33:fa:50:2a:02:77:14:7d:aa:
0e:d4:55:1b:e0:98:fd:4e:e1:01:e6:45:cf:8f:2c:
14:ea:b5:a9:6d:9a:95:fd:81:e5:f8:44:bc:1a:98:
4f:2e:e0:a7:ee:47:6b:f0:bc:86:2d:ff:af:ed:f1:
bd:ba:10:52:66:13:6b:b7:16:8b:8f:44:bd:41:6a:
23:69:ea:fa:70:6c:89:93:f6:fa:cb:ed:72:fb:a9:
43:fd:6e:6b:79:3e:6a:75:e2:ee:4e:66:cb:58:92:
8e:b5:7e:ad:ee:b8:a0:e5:db:fd:c0:a6:fa:37:d0:
d5:6b:52:6f:c7:a7:2d:fe:b3:5b:7d:39:32:9e:b8:
dc:37:b8:25:f7:6a:78:c5:da:61:f4:d0:7e:7f:0f:
0c:0a:c2:9b:31:b1:5f:2e:29:8c:10:2e:73:a2:aa:
e2:26:d7:d1:c3:fc:a1:65:7c:47:af:39:33:84:f3:
40:7a:c0:03:7b:1f:ed:98:93:a5:81:d2:39:b8:02:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:69:B1:F5:DC:E9:21:12:CF:92:3E:E9:5D:9E:F8:0C:E1:9C:25
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:a5:08:6a:37:a5:3f:08:16:d1:d8:4d:59:f7:d3:b5:bc:
ef:55:2e:6a:a4:63:8d:bc:ec:b3:de:44:36:f5:73:49:3f:f9:
81:57:08:d7:4f:01:b2:b1:b5:4c:77:d7:7c:f3:0d:ab:04:2c:
d6:5d:6f:f8:bb:aa:e3:dd:e9:ee:82:d6:89:3f:ba:ec:db:4e:
4d:4d:c2:ed:75:15:94:bb:88:a0:d4:3c:05:62:af:50:d4:e6:
f4:f9:3c:5e:59:ce:3e:a6:a6:b4:b1:97:81:16:9c:f8:35:a8:
3d:34:5a:5f:fa:eb:9e:da:3b:d0:45:d5:bc:c6:a7:7b:b4:0b:
08:9c:71:74:8b:8e:2b:d7:86:d0:05:7e:ce:35:b6:1a:80:24:
bd:c1:19:7e:cf:2b:61:ab:71:d6:6f:d1:05:90:14:a0:6f:6e:
06:49:13:b6:e9:49:73:ad:17:9a:c6:46:8c:bb:47:c1:ed:2b:
77:61:bc:db:38:8f:87:f5:0c:7a:8d:b6:73:a8:05:f7:b3:3f:
e5:7d:28:34:30:81:3b:86:4f:13:23:ab:47:49:10:3c:28:62:
06:d9:41:40:90:88:7e:85:cd:60:a1:8e:4d:47:47:96:4b:fe:
f2:63:0f:35:6d:8b:e6:a2:e3:55:31:46:bb:b7:0f:94:ea:93:
27:80:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:53 2025 by rpki-client