Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: QlYcme0EBc9kQBN6JRI3SEmY7NRnGfJwwFngr0IHMNo=
Subject key identifier: CE:4C:2F:70:A3:82:4B:BB:31:E8:3E:55:2D:88:15:1F:F1:1C:98:E2
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0198529F2048C6C069CC5941158B9A921AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 20:00:16 +0000
Manifest this update: Mon 28 Jul 2025 20:00:16 +0000
Manifest next update: Tue 29 Jul 2025 20:00:16 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: bxFMTaoDtbnd4oWmxPm8dQCC8Oa26ahRKo7UwT7z0/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:20:48:c6:c0:69:cc:59:41:15:8b:9a:92:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Jul 28 20:00:16 2025 GMT
Not After : Jul 29 20:00:16 2025 GMT
Subject: CN=ce4c2f70a3824bbb31e83e552d88151ff11c98e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:0b:4f:3d:62:4a:7f:88:76:a3:31:c2:25:
ed:fc:69:23:66:b7:5a:d3:10:3a:d8:c9:55:65:43:
75:69:03:3c:d8:f1:8f:40:0b:fe:6e:a5:0f:e8:3c:
56:14:dc:f7:e5:6f:96:a7:cf:49:fc:98:a0:c6:c5:
c1:b7:4c:6d:b8:c5:30:21:f4:f6:90:4d:25:8a:34:
99:dd:0c:47:13:52:20:92:73:3b:27:99:98:4f:52:
55:d6:d2:82:16:22:e6:b8:36:4c:80:f5:5e:ce:28:
b3:9c:4a:f0:96:5d:55:82:5b:a6:20:1f:0b:22:12:
b8:1b:37:e9:eb:bb:15:40:be:99:0b:68:df:8c:97:
84:fb:be:c9:8b:a4:42:82:31:33:41:7d:e4:e8:e5:
eb:f4:89:96:fb:2f:a9:8a:7f:a3:eb:b4:ff:68:5a:
6a:45:b5:c9:92:ae:a5:d3:7c:3e:97:f8:7a:20:98:
8b:2d:21:d7:52:f4:7d:d3:77:59:42:96:fe:b4:63:
69:ec:66:73:49:27:11:89:e8:07:6c:01:dc:51:1c:
ab:7c:02:27:19:b2:f1:5f:8d:37:03:fe:51:68:5d:
37:5b:5f:e4:25:6b:8f:6b:c1:bc:c1:85:87:07:bd:
7d:e8:ea:51:f4:5c:19:45:9c:04:97:40:62:7b:4e:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:2F:70:A3:82:4B:BB:31:E8:3E:55:2D:88:15:1F:F1:1C:98:E2
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e6:4d:62:47:2b:c4:4c:f0:29:82:6a:ea:3c:09:d0:e2:73:
fa:02:84:6b:d3:39:f4:0e:e4:35:61:bb:83:86:e7:49:39:b1:
9f:7e:2a:0d:21:45:3d:1c:eb:50:e7:c9:71:24:89:05:dd:7e:
ed:65:72:43:d3:3e:0d:06:26:7f:26:6f:86:6b:d3:20:e7:2e:
99:e1:51:85:b9:ea:84:9e:82:8b:2a:33:f6:ab:67:50:79:0b:
a0:be:cc:b2:9f:dd:ed:66:19:d0:85:c1:72:31:4c:70:0d:28:
ca:f5:52:80:59:98:ec:79:78:d0:12:ab:6a:19:d8:e0:48:96:
93:e0:a9:da:66:b9:a5:e0:67:f0:3b:6b:fb:5e:ac:1d:86:72:
7d:9f:02:62:83:ec:d0:84:ba:8b:bb:ec:22:dd:bd:78:54:d8:
e4:4a:25:55:b3:47:f8:f4:4a:03:2c:4a:2f:db:20:61:eb:8d:
d9:2b:bb:fd:1b:38:80:47:d0:2c:b7:53:59:c5:c9:8d:02:e2:
3e:0e:cb:74:4f:a5:02:e3:99:de:b0:8a:24:17:52:47:6a:6a:
21:2e:3d:6e:d1:a5:d8:01:08:6c:b1:3a:33:fc:4c:2e:0b:91:
42:96:08:a3:92:5f:9a:65:c0:0d:44:5c:c5:82:c0:10:ca:9e:
3e:75:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:14:31 2025 by rpki-client