Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
File: KqPjBJdiCGjhestHhoLOegvRNTQ.mft (raw, json)
Hash identifier: K+0lmq4UpLI7FhC8Ix9+eyQsO6d9fYSv72aeyY0eiUg=
Subject key identifier: C3:8D:08:A3:25:24:CA:58:A7:45:AE:B5:5C:B6:ED:A7:59:CB:CC:FB
Authority key identifier: 2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
Certificate issuer: /CN=2aa3e30497620868e17acb478682ce7a0bd13534
Certificate serial: 019845F6696F2A9ED2753A8F748381EF51D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 09:00:33 +0000
Manifest this update: Sat 26 Jul 2025 09:00:33 +0000
Manifest next update: Sun 27 Jul 2025 09:00:33 +0000
Files and hashes: 1: KqPjBJdiCGjhestHhoLOegvRNTQ.crl (hash: MJeXGsz/FgT/WB+IeHj3FBTrls7Q5yVX5cBF0fU3bE0=)
2: _F5YjzIp4N7IiS5lXnJMJsPMLEU.roa (hash: HX+68oJeKBQGUaK3TL3s9cs53fsCINCeh8CnxLw+JsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:69:6f:2a:9e:d2:75:3a:8f:74:83:81:ef:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3e30497620868e17acb478682ce7a0bd13534
Validity
Not Before: Jul 26 09:00:33 2025 GMT
Not After : Jul 27 09:00:33 2025 GMT
Subject: CN=c38d08a32524ca58a745aeb55cb6eda759cbccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:ae:93:7f:83:6d:44:53:0d:73:84:dc:7e:
d5:c6:8f:0f:7f:a3:f8:85:40:be:df:13:25:25:a2:
31:d4:e3:5e:68:76:77:e3:9e:ee:5e:11:ca:04:6b:
80:4f:17:d6:76:61:4e:98:f6:db:8b:a0:bc:c5:e9:
db:db:38:92:85:6e:6f:bc:cc:d5:f4:27:f2:4d:4c:
80:47:37:ea:59:b2:29:8b:9d:b9:73:19:22:c3:75:
f5:5a:56:1f:2b:58:13:02:8d:09:07:cd:8d:03:1d:
f8:1f:f0:4d:ba:2e:18:48:ad:dd:bc:74:d6:6e:2f:
e7:43:7d:57:ea:aa:9f:13:6e:db:0f:d4:fd:f4:96:
75:bf:58:68:7a:8a:5d:8a:02:1b:07:58:d4:4a:8f:
9c:a4:e9:87:c3:67:2d:9c:29:ce:3f:e3:fa:8b:67:
ee:3d:18:0a:f8:f7:6b:ba:00:74:1d:7f:eb:77:61:
31:b9:bc:7c:8d:9c:40:c6:a9:a7:62:c3:af:b7:81:
2f:b8:96:e9:bc:12:91:e5:17:a2:11:dd:59:6c:c0:
2b:80:1c:e5:76:89:20:ad:80:f4:f7:15:24:d2:d4:
24:63:58:bd:db:87:c1:ec:57:f8:ee:80:75:84:69:
bb:19:1e:33:ca:c5:e0:83:92:01:96:c4:b6:d7:63:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:08:A3:25:24:CA:58:A7:45:AE:B5:5C:B6:ED:A7:59:CB:CC:FB
X509v3 Authority Key Identifier:
keyid:2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:e3:ba:ee:cd:12:2f:7d:3e:a3:33:01:0a:cf:33:d8:c8:
f5:0b:b9:1d:97:3b:1b:ce:96:8e:b8:c5:2e:4b:57:f4:45:57:
8a:b7:59:36:80:4c:5d:76:e1:53:81:9d:45:e5:ca:c1:2f:0d:
69:78:aa:be:13:ee:3c:44:9a:74:c1:27:3b:34:29:da:39:c4:
b7:de:78:0d:dc:a1:0f:0c:d0:75:79:dd:1e:ec:ec:70:5a:02:
fb:ea:7a:09:8a:06:8f:b0:98:bc:73:86:4a:1e:4d:73:e3:03:
b9:ef:e3:6e:e3:e8:c5:10:a7:f2:d7:2d:22:ea:f5:39:a4:86:
7f:09:37:4a:6c:a6:65:5f:af:f6:f4:d0:15:da:f6:65:96:1f:
88:1d:71:82:4b:d5:02:e6:61:2b:50:c1:2f:4c:24:40:c4:b6:
48:61:b1:e4:04:ed:e5:39:78:74:24:24:69:a4:b2:9c:8e:5f:
76:08:62:11:56:48:e1:66:f1:5a:24:ff:53:b5:bc:37:54:bc:
b2:2a:01:ad:78:dd:a7:52:60:77:5e:69:2d:f6:db:20:80:65:
1e:3f:a1:4e:3b:37:38:d7:65:83:66:e8:ba:df:e6:0e:1c:ee:
07:3f:b9:74:43:0f:35:15:b6:6c:59:97:a3:3b:dd:23:62:80:
33:97:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:56:46 2025 by rpki-client