Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: 9/bYaKWinAIfN4X3CXhqdJtdzbHjg0p5sEyFGQ0xFWQ=
Subject key identifier: 2C:AB:E7:DD:3A:E9:9C:4E:4F:E6:1C:2D:FD:A3:6E:F4:5B:EB:3D:19
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 0198548DAC043E223600A5AF3F0DDA085EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0B7A
Signing time: Tue 29 Jul 2025 05:00:27 +0000
Manifest this update: Tue 29 Jul 2025 05:00:27 +0000
Manifest next update: Wed 30 Jul 2025 05:00:27 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: vNGZ3maMRjTHSLqCEiXsaN696PF/UaEY+Xvd1hAa+bk=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:ac:04:3e:22:36:00:a5:af:3f:0d:da:08:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Jul 29 05:00:27 2025 GMT
Not After : Jul 30 05:00:27 2025 GMT
Subject: CN=2cabe7dd3ae99c4e4fe61c2dfda36ef45beb3d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:58:6e:2a:28:4f:d1:b4:da:0a:22:85:d5:
ff:5e:33:79:9a:bf:3b:56:0f:4a:50:a4:e1:0d:a8:
b4:94:91:6e:1b:ca:70:2c:2b:61:d6:77:c9:74:58:
10:a6:ff:da:53:e4:1d:a7:e5:e4:e8:3c:3e:70:c3:
51:c6:26:fc:c9:42:9d:f4:ef:39:59:35:be:bc:25:
a8:fa:3b:c4:7e:fa:76:87:33:7b:15:16:ba:85:9c:
fb:85:77:f4:7f:12:8f:3e:1a:f4:a2:35:6a:8f:13:
61:4d:87:69:4f:24:8d:16:ed:c9:87:12:8a:f8:d8:
5c:cc:04:26:97:53:2f:70:6d:7b:f2:33:1c:38:64:
e3:7a:6f:15:c8:78:71:eb:0b:d6:89:c7:04:13:48:
ce:1d:05:5a:e8:ec:5d:f8:31:40:9d:ec:0b:87:08:
ae:0d:1b:c3:ee:99:94:c7:b7:c6:b2:08:86:f1:28:
8f:96:df:b9:86:79:c0:4c:61:48:61:39:cb:c8:b0:
cd:56:e3:45:6b:49:23:c2:5a:73:63:6a:04:17:4b:
e4:a2:a8:12:52:84:7e:03:50:22:0e:a9:1f:10:2d:
b2:56:b0:d7:b7:53:54:3e:a3:22:85:04:3b:9a:a7:
04:04:b1:99:e8:aa:66:d5:ca:57:28:65:a2:0e:9f:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:E7:DD:3A:E9:9C:4E:4F:E6:1C:2D:FD:A3:6E:F4:5B:EB:3D:19
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:77:88:b5:30:13:d1:34:51:87:2c:f8:1a:ab:e6:06:26:bd:
f7:57:24:de:7a:c3:da:ac:40:f1:e3:79:1e:a2:c8:ed:86:02:
57:88:83:52:bb:06:b4:a1:1a:bc:d3:de:75:95:35:c6:48:8a:
ef:f9:0d:0d:76:1e:ce:ce:26:4a:1f:9f:1b:4f:1f:c2:ff:d5:
65:0e:27:a0:b1:8a:38:43:69:0f:06:aa:5c:58:3b:a6:49:17:
1c:04:01:27:fc:48:0b:f1:ec:41:91:17:f4:6d:cc:1c:7f:5e:
b3:bd:99:13:88:04:dc:14:98:40:86:78:0a:a1:82:9b:23:42:
42:87:23:a8:9d:09:77:d3:1a:31:75:d6:f0:7e:96:23:17:b1:
d7:45:d7:e4:9c:12:74:6e:17:0d:0a:50:b2:81:b8:bd:f1:3f:
6e:ed:44:4f:51:61:02:b3:94:03:b2:c3:f5:d2:4c:00:a2:94:
fb:ef:b0:17:a8:2c:ba:50:5e:cf:d7:e7:ca:06:eb:61:27:96:
98:9b:90:8f:51:d5:ce:63:05:0c:e3:f7:bc:78:32:c5:0f:0e:
5f:20:56:d2:37:31:1f:10:85:88:cd:3a:87:ed:0f:4e:26:52:
6c:72:97:21:df:a1:3c:92:e3:ff:57:39:b6:3a:9e:4f:cb:d4:
28:2e:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:51 2025 by rpki-client