Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: kpGvkkmyO+9w3KtlSegffDk7yTKwzoo11eXKQuxwXRI=
Subject key identifier: 7A:FE:0A:D5:62:9A:98:73:79:7D:C0:C1:26:7B:A3:B7:8C:85:82:3F
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019848F7266211BB059A750F868FE0813F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0F0C
Signing time: Sat 26 Jul 2025 23:00:13 +0000
Manifest this update: Sat 26 Jul 2025 23:00:13 +0000
Manifest next update: Sun 27 Jul 2025 23:00:13 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: wRACAqFxddz40ygFw4FymtccBB1JuDP5ijr8RtQBzks=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:26:62:11:bb:05:9a:75:0f:86:8f:e0:81:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jul 26 23:00:13 2025 GMT
Not After : Jul 27 23:00:13 2025 GMT
Subject: CN=7afe0ad5629a9873797dc0c1267ba3b78c85823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:ed:a8:8e:41:33:f6:68:cd:26:18:e6:1f:
cf:58:91:81:61:c6:13:e6:72:d8:84:bd:18:93:92:
b6:4f:fb:2c:3e:70:f4:d4:77:21:a0:c0:63:4c:12:
99:67:da:aa:2f:cf:df:43:e6:74:48:af:da:dc:7f:
da:1b:d4:87:b6:4e:6f:06:74:65:b3:8a:d9:69:93:
1b:7c:85:38:d7:18:4b:ae:a9:b2:b8:5a:a6:4d:9b:
ee:a7:bc:3f:57:42:23:b1:d7:11:9b:cc:24:df:0c:
f2:71:8b:c7:11:6a:b1:bb:2a:f5:6b:8d:c0:42:de:
1a:4f:24:fb:ed:77:fc:e1:d0:72:eb:ff:d9:0a:1f:
42:40:e0:0b:37:21:f6:21:d7:ab:eb:f0:f4:bf:37:
36:0a:69:38:93:ae:d1:fa:7f:23:b6:0a:22:90:a7:
b1:7a:c6:17:1f:67:f1:b2:8c:c3:2f:6c:39:69:7c:
04:3c:40:54:50:c8:7c:d5:2d:ef:b6:68:24:67:3d:
b9:9e:03:63:18:9e:50:8e:bb:c3:be:40:d2:76:fa:
6f:20:d4:f0:5f:cd:56:da:92:fa:f3:00:ff:eb:3e:
4d:67:a1:07:56:32:78:8d:2f:ed:eb:3b:9d:37:82:
66:c9:44:f5:e9:32:71:69:22:6a:b6:4b:94:98:81:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:0A:D5:62:9A:98:73:79:7D:C0:C1:26:7B:A3:B7:8C:85:82:3F
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:20:82:bb:fb:c1:e5:98:06:12:42:9d:f8:aa:62:0d:cf:
95:98:ae:7b:cc:5c:3c:fc:9e:d1:3c:04:04:78:7a:2d:52:bf:
17:30:35:57:68:bb:71:67:ba:5e:af:4d:02:e3:37:18:50:41:
84:9c:85:7d:ba:7a:9c:72:07:da:c6:df:6a:33:fe:81:d8:4e:
56:2a:a5:bc:6b:b1:17:c3:0f:8b:3c:be:31:f1:cd:8f:c2:d4:
71:0d:75:8e:34:c5:86:87:a2:fb:2a:0c:21:2e:e1:91:ab:36:
eb:49:7b:33:54:b4:5b:79:20:be:5e:f4:de:f1:f1:c8:a4:94:
4e:02:10:61:25:2a:23:27:19:e3:9d:37:fa:2d:bd:68:35:9d:
84:ee:ea:b8:98:99:54:4d:39:23:8c:13:1c:a7:a9:53:99:60:
ce:fd:64:87:08:80:77:c5:a7:ad:da:2b:64:c4:4b:ce:6f:c5:
67:46:94:ba:e6:46:ad:ca:af:18:f4:0b:ad:5e:6a:37:57:12:
99:18:8e:54:54:88:f3:72:dd:88:c9:70:1a:7a:0f:84:31:d1:
e2:a3:fd:bc:13:c0:6b:ba:ce:98:ea:55:f7:a0:fd:c5:96:35:
20:b5:16:4e:c7:62:71:b6:47:6f:35:24:07:0b:6b:e1:41:b4:
c7:3f:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:00 2025 by rpki-client