Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: 30PjMOOMN0knJ4WGPUJv0wdX8GIT3UMJb0NlK8bdeK8=
Subject key identifier: 30:07:BA:C2:F4:1A:52:2C:ED:88:0E:58:33:E6:28:05:3F:FC:46:15
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 01974A0CBB88CC05D8EA6070238DEC5DC301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0AF0
Signing time: Sat 07 Jun 2025 11:00:37 +0000
Manifest this update: Sat 07 Jun 2025 11:00:37 +0000
Manifest next update: Sun 08 Jun 2025 11:00:37 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: GrQV++KrNTePu4czSWrqhZn/WXbMPwjAszVBdgB2rdk=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:bb:88:cc:05:d8:ea:60:70:23:8d:ec:5d:c3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Jun 7 11:00:37 2025 GMT
Not After : Jun 8 11:00:37 2025 GMT
Subject: CN=3007bac2f41a522ced880e5833e628053ffc4615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d0:67:76:28:26:59:52:ed:2c:e4:5e:30:
d0:ca:78:7d:6d:7b:94:f5:46:4d:04:2a:48:08:d3:
f6:2d:05:b8:74:b8:a4:7a:7c:e3:d2:44:40:74:1f:
1a:ae:24:c9:6e:2b:68:9b:3d:2f:67:c4:38:7a:7d:
48:e5:94:b0:13:51:dc:f2:7c:50:1e:ea:58:d5:da:
1e:71:98:20:92:f8:f3:8a:b8:9d:92:8b:a1:13:87:
d8:d7:c7:04:55:a0:59:0e:78:5b:6d:26:51:50:c1:
c0:49:be:56:72:13:47:a4:7a:92:88:ac:fe:89:c0:
f1:11:ab:86:44:8f:88:f9:9c:60:75:ed:3a:32:d8:
d3:a4:5b:99:02:c1:43:79:f9:7d:51:43:d7:21:07:
7e:38:61:26:d5:27:8d:0f:79:98:a9:3d:94:e1:32:
a8:1f:80:fc:b0:d2:8f:06:8e:13:69:05:4e:f3:e6:
ad:d0:ed:5d:dc:4d:f4:e4:a4:d2:dd:89:4f:b9:1e:
44:d0:8d:dd:c5:f6:41:8c:83:ea:30:69:a5:74:56:
89:26:e2:48:cd:18:72:b1:a9:16:76:8c:fb:17:af:
18:b6:d9:25:c3:11:51:50:dc:61:38:7a:ae:9c:97:
4f:96:94:a1:cf:ae:7f:8f:bd:95:8e:6a:6d:26:5e:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:BA:C2:F4:1A:52:2C:ED:88:0E:58:33:E6:28:05:3F:FC:46:15
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:d8:57:9d:c1:06:a4:d0:8d:6c:08:dd:4e:19:01:b6:73:
60:40:af:4c:53:23:1b:8a:de:ac:9d:48:2e:3f:02:31:87:62:
83:3b:0f:b9:c4:cb:81:74:2a:c6:e9:e9:71:4c:03:47:8b:d1:
89:77:ba:99:c3:fc:47:9d:5e:cc:07:64:f4:dd:0b:70:fc:ce:
6a:9b:e0:8f:d7:30:17:fd:2e:86:42:1e:38:5c:9a:77:15:91:
08:21:a2:21:4b:6e:b6:fb:32:53:7b:bf:c7:ef:44:09:77:09:
85:85:b2:a6:05:2d:ac:5b:49:ab:1e:eb:67:65:77:35:28:41:
e6:55:50:24:af:c8:11:75:2d:17:fa:06:86:d5:02:93:4b:23:
91:22:22:20:be:dc:03:97:f5:6b:bf:ee:c7:9e:6a:d9:3d:08:
41:f8:a8:b6:8a:db:17:87:e8:77:8d:32:4a:c7:52:31:1b:ab:
cb:34:c9:c8:17:8f:f1:1f:5f:29:8e:4e:b5:93:b3:16:6f:de:
54:8c:f1:1e:bf:c1:bf:5f:8d:8a:d4:53:9e:03:5b:c6:07:fc:
02:68:ce:51:24:eb:97:17:1f:b6:5a:0a:da:98:ca:52:1a:ff:
5c:94:1d:88:ff:c4:b3:a7:c0:62:6e:11:1d:45:c6:3e:11:2c:
ca:35:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:23 2025 by rpki-client