Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: V8BAi/xCgjDGTsSOQErVlA4m3R93FcSTDkYBocyFTnA=
Subject key identifier: EC:3F:8D:E3:1A:AD:39:7B:19:E3:A2:71:18:9E:6F:67:9A:57:E4:75
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019A168577C147D1A0D3D2D42CD66F166376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0C63
Signing time: Fri 24 Oct 2025 14:00:36 +0000
Manifest this update: Fri 24 Oct 2025 14:00:36 +0000
Manifest next update: Sat 25 Oct 2025 14:00:36 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: IrUn0OxExkpTGO5VsD9f5TrPMAG7vjYKNKeGUQi7XgM=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:85:77:c1:47:d1:a0:d3:d2:d4:2c:d6:6f:16:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Oct 24 14:00:36 2025 GMT
Not After : Oct 25 14:00:36 2025 GMT
Subject: CN=ec3f8de31aad397b19e3a271189e6f679a57e475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:ea:32:a1:99:47:f7:7f:cb:ba:53:a1:be:
e5:ee:96:dd:4e:63:61:1f:92:d0:9f:ac:cd:69:bf:
18:2e:c1:b2:3f:82:10:ac:d8:3f:4c:12:3c:40:1e:
e6:1c:ce:1e:90:9d:9f:29:d6:7f:15:2f:f0:55:29:
99:ea:96:95:04:82:d5:d3:83:df:45:2e:ce:46:95:
aa:a7:2a:26:af:e5:62:5c:56:76:c6:0f:ae:74:84:
39:99:11:94:fa:90:74:5a:81:ec:81:59:bb:b0:43:
3b:a2:f3:7f:d3:37:e5:eb:78:01:cb:7f:9e:47:2c:
0b:37:24:26:9f:12:c2:73:9f:8f:d6:6f:bc:1e:a5:
3f:09:2e:5d:f0:7b:69:c9:97:b5:f4:9e:5e:34:bb:
65:39:fa:0c:53:e2:4f:11:78:04:b8:64:24:22:57:
77:63:d3:35:97:55:8c:71:da:4e:18:ea:a6:21:0b:
eb:a7:6f:6d:79:7d:97:99:42:81:41:cf:c6:b6:85:
0a:7e:3e:b7:73:6a:14:c9:8b:ff:75:5e:21:97:92:
62:90:f2:ed:97:67:94:21:3f:4b:4e:35:f8:24:49:
89:b5:9b:61:05:5a:87:45:d4:58:63:37:e6:c4:8d:
b6:3a:90:b7:d3:64:60:a5:01:a1:ed:cc:7f:62:a0:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:8D:E3:1A:AD:39:7B:19:E3:A2:71:18:9E:6F:67:9A:57:E4:75
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:0a:9e:bc:ef:0a:3d:86:ca:0a:12:b2:da:89:d7:4f:85:
31:af:2f:18:97:1e:14:8f:47:a0:23:8d:c8:40:86:db:3b:86:
dc:7f:f1:26:cc:6b:fc:3f:9d:de:a8:e0:41:b6:f3:09:db:fc:
b3:b5:ee:0d:67:b7:f7:45:6f:22:07:32:e4:36:de:fa:01:76:
0d:ac:fd:7c:b8:58:69:3a:e8:c0:75:36:57:f3:2c:80:27:02:
2d:09:8c:19:d3:ec:74:96:9c:9b:c7:e0:7d:83:e7:8a:b2:63:
46:34:85:90:07:7e:79:d6:f2:cf:00:d5:b9:5c:d2:4b:26:df:
19:ea:a1:08:31:a0:06:ed:01:fc:57:81:8f:4b:ad:80:7f:7e:
ae:6a:90:82:71:c4:06:8b:a5:26:dd:8a:aa:49:a5:12:63:d6:
bc:12:cf:79:b2:e5:0b:e7:42:a8:3d:9b:08:39:04:57:47:ca:
57:25:e8:d4:1d:f5:7b:66:d7:86:4b:97:35:81:19:6c:b4:66:
58:97:0e:87:ee:50:d3:e8:50:27:31:fd:f3:59:c7:11:95:e4:
20:bb:e7:b4:54:37:6d:81:95:d4:d9:f3:d9:28:e6:b9:d5:61:
97:91:86:a2:65:a2:8d:8d:7f:f8:26:57:44:1c:42:be:c7:c1:
46:77:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 17:50:56 2025 by rpki-client