Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: 4Sv3dM4cuAkVm/ZNVFl9c4uv0Y2gIXRukIAEdGfqNV4=
Subject key identifier: 67:77:9C:BF:EA:99:FA:79:D1:CC:26:3F:7F:50:1B:B0:50:42:5B:B7
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0199240D3F5D345B2B7C8DEDAB552CC81FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 0872
Signing time: Sun 07 Sep 2025 12:01:11 +0000
Manifest this update: Sun 07 Sep 2025 12:01:11 +0000
Manifest next update: Mon 08 Sep 2025 12:01:11 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: 36CoSssC2i8tXSSuP1O6ujit3IvZnfM5Zc6N/Z5EaWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:3f:5d:34:5b:2b:7c:8d:ed:ab:55:2c:c8:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Sep 7 12:01:11 2025 GMT
Not After : Sep 8 12:01:11 2025 GMT
Subject: CN=67779cbfea99fa79d1cc263f7f501bb050425bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:95:60:fc:d6:16:1a:4f:e8:10:31:3f:80:
89:96:c2:e5:f0:50:9a:94:59:99:a3:92:00:5d:ba:
68:74:25:96:24:8f:ae:57:d8:bb:50:6e:89:9e:a1:
f0:7c:ec:ed:ed:c6:98:6d:5c:08:4b:0a:a7:94:59:
ca:c0:2c:22:50:d2:16:7e:74:e5:2c:a2:cd:15:2a:
bc:93:32:00:d8:85:96:39:c5:09:9a:79:ff:1d:76:
46:60:4c:bb:9d:f7:b3:74:a7:13:1e:c8:c8:cc:48:
31:11:0e:b9:01:2b:5c:b1:e5:67:7e:06:00:a0:86:
d7:9c:d2:c4:7c:bf:d7:16:b6:34:5e:74:b8:f8:0a:
18:2c:22:a9:94:53:e9:5f:f4:cc:44:34:b8:e1:e7:
81:f8:31:b1:0f:90:91:7e:46:f4:57:a3:84:7a:f6:
f2:79:ed:5d:c9:3a:ab:85:8c:c2:8c:bb:10:e1:b3:
94:75:be:60:9f:5e:9a:88:c9:73:91:49:f0:b3:fe:
60:cf:37:cf:74:4e:e2:61:6c:72:b3:32:9f:59:cd:
aa:37:fa:0f:3b:e4:fc:a4:ef:0d:43:50:62:d5:06:
a6:b0:2b:9e:9e:f8:d1:eb:18:c8:d4:dd:91:38:e0:
a9:36:6f:f2:d7:97:af:19:64:3a:0b:6b:c3:df:dd:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:9C:BF:EA:99:FA:79:D1:CC:26:3F:7F:50:1B:B0:50:42:5B:B7
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:70:0b:e4:7c:51:2e:5e:7c:72:86:e4:18:65:8c:e3:fc:97:
b3:98:95:18:10:2a:45:9a:ef:7a:99:df:ef:4e:39:32:1e:f1:
80:0e:81:6e:9c:ab:41:79:05:d0:84:81:f5:3d:0c:26:cc:20:
40:a1:73:bf:9c:15:af:4d:96:b7:96:3d:fb:9c:7d:4b:8f:5b:
a6:7c:dd:5d:8b:cb:a8:ab:ab:33:dd:36:2d:14:c0:15:94:85:
5f:06:55:81:41:ee:d0:13:e2:c1:a6:ea:ff:68:50:34:53:e4:
90:b3:c6:dc:e0:23:79:7a:47:ef:f0:67:a7:a9:3c:a3:77:23:
34:23:ac:34:8d:1d:87:64:fb:68:0e:85:1d:92:06:85:31:df:
6f:d0:db:45:2b:23:9c:a7:16:10:e4:e8:fa:be:62:ce:a4:0f:
2c:6a:97:6e:8b:12:d2:84:4c:ad:e8:e0:c6:48:35:f8:c1:b6:
e1:9e:2e:16:8a:ad:4a:10:da:9e:01:02:ee:d1:2b:b8:f2:45:
80:f0:8d:52:60:fc:48:94:af:65:81:50:f6:78:8f:99:fb:5b:
78:8e:a0:08:86:76:24:3f:9f:1f:8d:6c:6d:50:b5:dc:ad:f3:
3f:f5:10:dc:f3:9a:e8:98:fb:87:82:40:a4:66:42:cc:8a:47:
de:7c:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:16 2025 by rpki-client