Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: RL68tJX4GXbOsv7zXumn+DOYl0xpgj9sfqzh23bOnS4=
Subject key identifier: 56:98:D6:AA:45:BC:47:59:BD:4B:79:CA:5A:21:BD:69:B4:0C:8D:AB
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01984AE5F03219A7BB035840F939CBCC4964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0895
Signing time: Sun 27 Jul 2025 08:00:39 +0000
Manifest this update: Sun 27 Jul 2025 08:00:39 +0000
Manifest next update: Mon 28 Jul 2025 08:00:39 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: RafUV0R121H3BMPjcwC1ZdlA+F4FMiFFGs41FNkHcqM=)
2: cNLYAjPMpLbcGOrpCslyUiLMP34.roa (hash: JmHm3+B47TlFvMWFE2W9uNvIfC/wvizwOPaVYVDTxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f0:32:19:a7:bb:03:58:40:f9:39:cb:cc:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Jul 27 08:00:39 2025 GMT
Not After : Jul 28 08:00:39 2025 GMT
Subject: CN=5698d6aa45bc4759bd4b79ca5a21bd69b40c8dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:65:35:87:ab:a8:79:2e:36:a8:02:8d:34:
32:b8:14:24:26:6c:6b:44:81:14:7d:ae:77:87:79:
b4:56:14:b3:e1:b5:67:8f:c7:a7:cb:ac:50:21:cc:
bd:ec:e2:c2:47:3d:1b:69:3d:dd:5d:b3:d3:34:7a:
89:a0:6e:db:94:70:62:af:56:9a:e6:e6:75:e9:3d:
92:bb:d3:99:28:97:70:30:9f:c1:87:b8:bc:9d:50:
64:b5:48:92:da:7e:93:05:8d:08:f3:e1:54:06:ed:
82:01:ef:76:69:0a:e0:c6:5d:41:17:6a:a3:48:12:
a6:67:8e:4f:10:9a:ed:2f:8f:eb:33:f4:e0:5a:1a:
6c:94:b4:c5:28:15:bb:5c:60:8c:f2:9e:f8:55:bc:
33:a0:59:b4:74:98:b4:bf:13:58:c5:06:37:dc:2e:
97:e0:07:85:9a:9b:5a:4a:67:99:0e:52:22:49:79:
30:e8:89:e5:3e:84:88:a4:9f:e6:eb:fa:2c:1e:11:
9b:12:61:a5:5d:29:53:a2:53:63:93:c2:a9:ad:38:
5d:74:82:a5:ca:41:4a:d3:f1:2f:0f:d2:cf:f9:1f:
27:3b:df:d9:d9:05:29:a6:c5:67:08:9c:ea:6c:bc:
a2:06:3c:54:fb:4a:f3:bd:e6:e1:13:16:e0:86:4f:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:D6:AA:45:BC:47:59:BD:4B:79:CA:5A:21:BD:69:B4:0C:8D:AB
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:47:85:7c:1a:35:c6:8e:55:72:c2:2a:30:e5:ba:7a:55:
11:d0:32:76:3a:cf:de:24:9d:cd:44:31:a6:ef:59:c4:d5:44:
5d:93:95:c3:70:3f:c8:c9:a4:4d:b4:e7:46:54:ba:38:24:36:
aa:03:ad:11:4b:96:f6:d8:f9:d1:86:c7:8f:e5:9f:74:7f:fc:
9d:09:f3:56:ce:83:9b:3f:cc:7a:8e:79:a2:e4:ab:5a:af:d5:
40:59:3e:c3:42:ac:e2:7f:f5:61:8d:09:87:dd:2e:e8:bc:a3:
b4:88:43:f3:7d:83:7f:5e:0d:e0:70:74:ac:84:b3:b2:c7:77:
cd:db:22:3e:91:2d:87:f3:3a:1a:11:e0:09:4b:b3:8e:92:34:
8b:06:d1:96:33:f7:31:37:98:83:10:7e:8a:bc:14:f6:57:7a:
b4:b9:6c:bc:8f:4a:c4:4f:23:c4:08:ca:6a:66:94:46:09:11:
ff:3b:72:c9:98:6a:bc:a2:d7:12:3d:da:ab:74:33:9f:bc:b7:
2d:e1:eb:64:2b:5e:75:b9:cc:68:d6:a9:32:fc:fc:16:c5:1d:
bc:75:95:33:70:fc:5c:1a:f8:7b:fe:1d:06:4e:2b:d5:a1:66:
11:c9:65:c5:47:a7:c4:68:d9:6b:2a:de:93:5d:d2:61:b2:02:
b4:03:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:45:03 2025 by rpki-client