Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: PMd3H6t7B7O5zpDviGFXqDG7fVpA9KZOtKQ+RyQ43+g=
Subject key identifier: 98:13:F9:43:16:96:13:9E:FA:F9:E7:B1:DF:84:4D:7C:26:7D:D1:5A
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01984A780CE0C9F56B8B30FD40D4D68C386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0FE8
Signing time: Sun 27 Jul 2025 06:00:38 +0000
Manifest this update: Sun 27 Jul 2025 06:00:38 +0000
Manifest next update: Mon 28 Jul 2025 06:00:38 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: hoVFRwDFnEGAvAntmVsulor54rSrPNqsgP0DX55e+Ug=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:0c:e0:c9:f5:6b:8b:30:fd:40:d4:d6:8c:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jul 27 06:00:38 2025 GMT
Not After : Jul 28 06:00:38 2025 GMT
Subject: CN=9813f9431696139efaf9e7b1df844d7c267dd15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:e3:90:1c:02:1e:7a:cd:ee:3a:9b:e7:93:
3b:c3:78:41:2f:7a:b7:4a:2b:e0:2e:61:17:d5:05:
48:65:10:18:52:1d:cd:4e:3c:89:cb:12:2e:9c:2f:
fe:04:b4:1e:96:c8:37:f1:73:6b:02:a8:c1:a3:54:
4e:63:bd:1e:ff:4d:84:fd:ed:77:be:ca:fd:01:98:
2c:a2:99:8c:e2:9f:76:91:7e:36:10:23:02:c5:2e:
d7:19:4d:2d:b7:47:70:17:59:aa:52:db:cf:59:9d:
c0:97:48:d3:34:9d:09:94:28:5b:1b:bf:6a:e9:b4:
82:69:b9:6f:37:a8:b6:fb:7c:1b:97:b0:30:49:ca:
ab:00:01:6a:d1:89:94:01:d6:e1:98:1e:8d:74:91:
d8:d7:da:f5:4f:1c:c7:a6:39:8e:c8:7d:3a:3b:c7:
cc:74:1e:24:5e:18:c3:2f:f3:5f:8b:2b:eb:53:b3:
d4:03:44:d1:69:db:d5:3c:a7:94:05:11:6c:b7:e5:
b2:87:88:19:f2:0d:e6:64:dd:f1:d5:fc:1d:74:fb:
73:fc:d4:7f:2b:fe:6e:01:8a:e2:bc:ce:fc:69:a9:
25:40:ee:a5:a9:63:8f:bf:19:3c:7e:c6:b6:cb:05:
9c:2a:3b:00:eb:fa:6a:b1:08:22:16:7b:0d:f0:14:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:F9:43:16:96:13:9E:FA:F9:E7:B1:DF:84:4D:7C:26:7D:D1:5A
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:d1:40:b3:f5:7f:5b:77:7f:82:d2:9b:2a:66:83:36:a6:
00:34:83:69:92:e7:f5:54:56:7b:68:9b:69:d5:06:90:26:4f:
9d:ac:00:99:aa:b6:f3:2d:da:d2:3e:f5:33:8b:51:80:82:97:
13:b2:a2:a4:88:a9:b4:f1:67:cd:5d:a8:94:ab:45:28:ba:d5:
71:b3:f0:5c:56:0b:e9:88:5f:f6:55:e7:e1:10:e0:21:80:b1:
23:19:66:b4:65:b3:0f:4c:c4:4a:37:b2:4f:b9:b3:f1:a5:b5:
60:b5:fc:bb:62:87:7e:82:03:19:a8:c6:fe:e1:e4:e0:34:73:
d8:3e:73:98:45:21:62:0a:e1:4d:8b:c2:8e:78:54:97:79:9b:
a2:91:aa:f8:da:68:78:54:bf:77:96:05:f4:cb:bd:2c:ba:07:
d4:92:bc:e4:eb:c2:06:5f:86:fc:81:69:a3:9d:29:28:2a:8b:
3e:f8:f1:a7:b2:d3:3b:18:76:88:37:24:61:35:45:eb:3c:25:
50:b5:83:2c:61:56:51:b6:bd:b6:df:32:c8:6a:c4:fb:ae:cb:
70:6b:bf:6a:19:6f:69:e6:9b:7d:fe:7d:7b:76:6e:41:41:23:
a3:2e:d0:ed:88:79:05:86:d5:29:ea:f2:21:75:1b:38:71:b5:
21:bb:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:31 2025 by rpki-client