Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: mejLVxh5bCobqCYPoDuud4tatSasJuzNOEXNCfi6rDA=
Subject key identifier: 13:2B:70:97:CA:BD:5E:15:1D:9D:37:A3:F9:FB:44:49:D8:70:50:31
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 019923A0BFE1AEAC341302D6C0D68E969E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: EE
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: f09tHmQ8Pi07yUn5kl6JOlZpsUskhwyZCVQrUfwSxZc=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bf:e1:ae:ac:34:13:02:d6:c0:d6:8e:96:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=132b7097cabd5e151d9d37a3f9fb4449d8705031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:fe:24:96:21:17:7c:f7:47:06:b4:cb:09:
b2:93:b4:df:13:f7:37:9f:3f:d1:a8:95:53:06:69:
28:e5:f1:2c:e5:f4:2f:36:a9:fa:a3:a0:7b:63:2f:
3b:e9:bb:9a:a3:d9:fc:8c:cc:79:a8:b1:a2:4b:fa:
bb:17:34:db:38:46:ed:d3:8d:ac:da:ec:09:56:58:
bc:7b:e4:46:16:c6:dd:f9:67:0b:d8:75:59:c4:bc:
26:30:1a:a2:d2:88:92:27:c1:f6:b4:21:8c:09:bb:
f6:78:f8:c0:0a:62:ab:95:40:42:b4:96:5f:d0:a3:
c6:d4:df:94:15:74:8d:ec:cd:56:a8:c3:d9:3f:61:
81:b3:ac:a3:98:4f:b3:ec:82:4d:46:51:74:72:34:
45:aa:40:e1:3d:4b:bb:bf:76:36:ca:66:68:f1:99:
67:de:1d:19:ff:3d:06:a0:50:eb:98:ef:6c:b4:02:
e3:30:47:0d:65:56:1b:af:08:42:37:c2:9c:03:0f:
95:42:55:69:cd:4a:57:4e:b9:89:1f:ca:49:e2:60:
ee:39:fd:62:a4:8f:d0:21:aa:c8:99:4e:98:f8:55:
5e:ba:ec:18:10:ef:74:bb:d9:a3:0a:73:38:69:10:
8e:af:61:60:9e:e6:49:6c:18:5a:ef:63:36:96:74:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2B:70:97:CA:BD:5E:15:1D:9D:37:A3:F9:FB:44:49:D8:70:50:31
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:60:40:7f:8a:bf:36:59:4a:a7:ce:4c:58:3e:1c:0e:22:
52:de:47:9e:b8:3d:c4:97:44:7f:56:4d:f5:10:80:d9:21:66:
82:d3:8c:d8:38:0c:c5:de:db:c1:cc:8a:02:ce:cb:3d:6d:7a:
1a:bf:f2:4f:38:27:e8:36:e9:df:e7:1f:32:38:73:4f:30:0a:
a8:27:14:ca:95:b5:52:a4:90:45:12:90:b3:43:22:dd:d9:9b:
7e:43:3b:07:73:20:25:85:60:f2:4f:02:74:be:df:fa:b7:8c:
18:72:7a:51:a1:7e:e8:15:b5:2f:97:82:65:9a:5b:13:aa:04:
96:01:44:48:2c:0c:a6:11:32:21:66:24:0e:c3:8c:1c:7f:59:
8e:08:9c:dc:98:55:cb:40:e9:d0:7d:cb:80:fe:e6:70:bc:06:
77:9c:b1:8d:f9:cf:e6:76:27:18:d2:13:2f:d7:3a:6a:c6:77:
8e:5c:64:2c:a9:29:b5:1d:e2:27:4b:35:13:e1:60:31:87:c1:
4f:e5:3d:c2:67:0c:93:88:b5:4c:08:ce:91:eb:8c:64:d7:84:
94:5d:a6:f8:34:6d:bd:37:7d:11:6b:eb:d6:62:ce:c6:b7:a5:
81:dd:6a:f9:4b:5b:2b:c7:33:36:00:22:f3:e5:ce:72:c8:8d:
07:eb:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:43 2025 by rpki-client