Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: mkq9IWoYIXuu8xHMl24W0zsZNMiBTe6x1hRqiU23NxE=
Subject key identifier: 33:5A:1C:62:66:36:D3:81:50:DD:F0:7C:0B:31:FA:81:6E:8E:2E:83
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 019921B23597A5FC15D95F2552102937E25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 01:02:30 +0000
Manifest this update: Sun 07 Sep 2025 01:02:30 +0000
Manifest next update: Mon 08 Sep 2025 01:02:30 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: piwNKH9KSbXeBtSkM/fRKxOvmixT+jaCvLQzm3vwURg=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:35:97:a5:fc:15:d9:5f:25:52:10:29:37:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Sep 7 01:02:30 2025 GMT
Not After : Sep 8 01:02:30 2025 GMT
Subject: CN=335a1c626636d38150ddf07c0b31fa816e8e2e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:17:ae:59:c0:f3:91:49:da:84:12:9c:da:
4d:96:32:d6:ca:23:86:7e:1e:48:fb:9d:8c:d0:cc:
82:a0:f3:95:50:19:89:47:bd:07:7a:20:de:cd:78:
8b:97:7a:b4:8b:b8:2f:af:9b:5d:c7:00:79:8c:d7:
bb:4b:cd:a9:a8:d2:86:62:25:df:55:43:9d:b7:90:
bf:44:cd:53:64:8e:fa:55:8c:62:83:6d:4d:24:28:
22:58:82:30:06:8e:a8:ac:b9:97:00:7a:e9:16:51:
4d:f6:34:4c:63:2d:33:f7:de:05:ce:cb:b9:ee:e9:
c3:77:43:a0:fd:c5:98:c8:69:9e:3d:1f:61:e9:2e:
8a:74:4e:0c:e7:7c:22:87:dd:99:94:f1:2c:76:61:
64:67:33:c3:5a:48:26:62:2f:cd:a7:c4:4a:7a:a7:
bb:d6:1f:0b:25:62:a6:d5:34:57:ce:69:07:1f:f3:
32:67:f4:a5:c4:92:79:c3:1e:bc:59:d5:61:95:63:
5e:0d:d9:39:00:44:da:30:21:ac:5e:66:60:f3:70:
f4:a9:72:b3:8f:b1:d0:22:b3:4f:09:fd:71:88:0e:
50:e4:04:64:d5:3b:b7:36:3f:81:26:31:66:25:c0:
70:9f:16:74:3c:c3:21:86:23:e6:cc:2b:b1:bf:6d:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:1C:62:66:36:D3:81:50:DD:F0:7C:0B:31:FA:81:6E:8E:2E:83
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:0e:cd:9f:90:aa:a5:7b:00:a1:49:1b:89:9e:49:2a:5e:
1c:96:1a:2c:6d:b6:99:13:bd:00:30:8f:cf:16:f3:85:25:fe:
21:46:1e:38:16:a8:2c:bd:e2:09:85:c7:40:17:22:e6:41:d1:
21:de:8f:92:19:cd:18:84:87:87:d7:ab:17:79:72:81:18:10:
84:91:c6:2d:e6:0d:c9:03:58:a9:4d:a3:94:62:6c:71:06:b0:
ab:a1:aa:08:09:d6:e6:06:64:14:89:4c:13:64:d7:1d:33:91:
4e:01:de:20:83:cf:cf:ce:0b:39:d9:39:ba:cd:e5:48:f6:41:
8d:0f:f2:13:0c:fc:4b:ad:17:f5:eb:3b:05:fd:43:41:c7:70:
d6:03:5b:97:e6:bb:99:bb:7d:a3:d2:0e:bd:3d:fb:dd:9d:d1:
b0:6c:f8:f1:fa:65:b5:d8:4e:4e:ca:33:c7:cf:c8:d7:f6:fe:
3d:63:df:24:26:03:8c:93:67:82:52:c9:0a:51:65:67:bf:b1:
0d:c0:2d:91:4e:55:fc:89:d5:4f:bb:fb:a0:b5:26:84:6b:7f:
ac:6d:22:d6:e9:50:d8:5b:ad:af:da:69:a5:04:2d:6b:37:49:
e6:71:ea:95:2d:20:d9:44:f6:64:1b:fc:f6:09:63:38:ed:43:
a2:c3:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client