
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: VouZsYvJMWt7emDoTo4pjJp9ECcTNX3Uxn3VqkxbOI8=
Subject key identifier: 76:CD:4F:A9:98:54:34:6C:D3:21:1B:36:80:1E:15:54:FE:17:F9:5F
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01975158AB10C59C9F9BCBE3E502FE09751B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0F67
Signing time: Sun 08 Jun 2025 21:00:54 +0000
Manifest this update: Sun 08 Jun 2025 21:00:54 +0000
Manifest next update: Mon 09 Jun 2025 21:00:54 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: qYp2LHxPyVInr2bF5Fd2NJgnxcb8nQ275avoturENQo=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:ab:10:c5:9c:9f:9b:cb:e3:e5:02:fe:09:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jun 8 21:00:54 2025 GMT
Not After : Jun 9 21:00:54 2025 GMT
Subject: CN=76cd4fa99854346cd3211b36801e1554fe17f95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:52:70:f6:8a:34:39:20:3f:05:90:b6:a5:
1b:88:21:cf:76:59:34:46:f6:56:3d:f8:7a:4d:0a:
2a:6b:ce:0e:7b:da:b0:0f:9b:c2:55:1c:06:71:69:
99:ed:5a:96:e5:6a:d7:63:07:d6:a6:e6:13:5b:80:
b8:c9:df:74:6f:b5:66:4a:2f:12:8a:e1:11:db:06:
65:b9:87:75:57:7f:00:4e:ca:eb:67:99:ba:0a:e8:
a1:9f:97:54:64:bf:d0:b4:77:b1:e4:34:db:c2:14:
bd:df:c7:82:12:de:5b:a2:6e:46:ef:c9:61:f2:ff:
e7:83:e9:93:41:5c:23:b4:61:31:26:16:2f:fe:fc:
9f:c3:3b:b3:ca:64:18:89:d6:dd:ef:05:1a:e6:99:
67:71:e8:40:34:05:a6:57:7b:f6:df:ff:7f:8f:44:
ef:5d:f3:3c:d5:51:63:8a:7b:cf:92:9a:32:b4:b8:
c1:4e:31:f0:30:14:6d:53:6d:df:07:11:f7:26:d8:
39:32:9d:c3:df:6e:7b:91:92:89:6d:ab:30:fa:87:
8d:bc:b4:0d:60:40:af:0a:cb:98:5e:c2:bd:72:2d:
13:cc:a9:84:a1:07:2f:4f:75:1a:b3:64:c9:45:18:
91:32:d5:1d:36:6e:27:28:91:52:31:01:4a:06:11:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:4F:A9:98:54:34:6C:D3:21:1B:36:80:1E:15:54:FE:17:F9:5F
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:95:2f:e8:fe:4c:5f:24:5f:ee:aa:d9:01:76:0a:fc:1b:13:
5a:80:67:9b:2f:6a:37:a3:bd:6b:99:0b:eb:84:26:d4:16:8b:
eb:fa:50:1a:7a:fe:91:59:ff:11:48:0b:ff:71:65:77:55:3a:
fe:e2:e7:9c:87:a2:e9:54:90:15:0d:5e:4b:1b:0d:e5:a9:8a:
ee:c0:91:1a:5a:1e:37:b4:bb:a3:96:a6:d1:7d:6e:7e:03:7c:
c0:16:ce:d4:63:bf:52:84:f3:49:2d:54:50:9a:e1:ba:a3:be:
95:da:83:05:0c:89:84:fe:e1:e8:6b:73:a0:44:27:d8:7c:42:
ba:6e:d4:05:c9:fa:ba:f6:b0:64:12:f0:b6:c2:de:81:2c:c2:
17:1a:9c:53:f6:f7:c9:b9:9c:ad:ca:cf:53:94:17:d8:a9:62:
f4:73:83:1b:e0:23:97:3f:92:91:a2:36:04:6c:93:dc:80:91:
64:0f:a9:37:cb:3d:43:63:5c:77:41:e1:e9:88:cd:32:4c:bc:
c4:bb:6a:92:64:a0:1a:e7:19:31:2b:e1:af:17:6f:22:ec:bd:
86:eb:2f:12:f5:d8:4b:45:92:8c:1e:37:8d:2b:69:47:29:85:
f3:5a:da:ed:e5:10:04:7a:96:54:7a:07:04:d6:fe:20:b4:e2:
a4:72:23:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWKsQxZyfm8vj5QL+CXUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjUwNjA4MjEwMDU0WhcNMjUwNjA5MjEwMDU0WjAzMTEwLwYDVQQD
Eyg3NmNkNGZhOTk4NTQzNDZjZDMyMTFiMzY4MDFlMTU1NGZlMTdmOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYlScPaKNDkgPwWQtqUbiCHPdlk0
RvZWPfh6TQoqa84Oe9qwD5vCVRwGcWmZ7VqW5WrXYwfWpuYTW4C4yd90b7VmSi8S
iuER2wZluYd1V38ATsrrZ5m6Cuihn5dUZL/QtHex5DTbwhS938eCEt5bom5G78lh
8v/ng+mTQVwjtGExJhYv/vyfwzuzymQYidbd7wUa5plncehANAWmV3v23/9/j0Tv
XfM81VFjinvPkpoytLjBTjHwMBRtU23fBxH3Jtg5Mp3D3257kZKJbasw+oeNvLQN
YECvCsuYXsK9ci0TzKmEoQcvT3Uas2TJRRiRMtUdNm4nKJFSMQFKBhHHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbNT6mYVDRs0yEbNoAeFVT+F/lfMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZUv6P5M
XyRf7qrZAXYK/BsTWoBnmy9qN6O9a5kL64Qm1BaL6/pQGnr+kVn/EUgL/3Fld1U6
/uLnnIei6VSQFQ1eSxsN5amK7sCRGloeN7S7o5am0X1ufgN8wBbO1GO/UoTzSS1U
UJrhuqO+ldqDBQyJhP7h6GtzoEQn2HxCum7UBcn6uvawZBLwtsLegSzCFxqcU/b3
ybmcrcrPU5QX2Kli9HODG+Ajlz+SkaI2BGyT3ICRZA+pN8s9Q2Ncd0Hh6YjNMky8
xLtqkmSgGucZMSvhrxdvIuy9husvEvXYS0WSjB43jStpRymF81ra7eUQBHqWVHoH
BNb+ILTipHIj+g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:17 2025 by rpki-client