Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: FYFW6FFklrjHs+l3v1rb0cgSRoPnrmT0cr3Dkl3Brno=
Subject key identifier: 2C:52:E8:65:4B:8A:99:2A:1A:A4:EA:6A:55:24:EC:24:CC:A6:D4:CB
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01974A0CCCFD23960B8F05725ADDB7916AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0E88
Signing time: Sat 07 Jun 2025 11:00:42 +0000
Manifest this update: Sat 07 Jun 2025 11:00:42 +0000
Manifest next update: Sun 08 Jun 2025 11:00:42 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: oWWbQcfsCAsCdG0zbYb2MG1FSc+d1flEepV7/QhPAyE=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:cc:fd:23:96:0b:8f:05:72:5a:dd:b7:91:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jun 7 11:00:42 2025 GMT
Not After : Jun 8 11:00:42 2025 GMT
Subject: CN=2c52e8654b8a992a1aa4ea6a5524ec24cca6d4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:84:fb:41:74:60:fa:6a:41:cc:b5:96:fa:
98:06:d4:66:96:68:ba:9c:4c:38:78:9c:ca:01:ce:
e6:11:55:3e:af:8d:a0:8d:85:b0:1c:9c:ca:69:77:
6f:2a:8a:b5:ad:6d:bf:04:3d:71:bf:4a:53:2f:87:
d2:5e:4c:50:6c:bc:86:17:59:23:46:74:8c:93:02:
bd:96:56:29:23:fd:65:93:de:22:bb:d1:7c:88:c0:
df:30:3d:ca:34:e8:39:ca:43:7e:19:f1:5c:33:8c:
a0:21:61:be:c4:0d:a1:d1:9a:26:08:ca:37:4a:b5:
51:b2:98:ad:3f:b8:07:bc:25:3d:ae:14:1c:e5:bc:
5c:8f:7d:ec:bb:90:de:7e:79:69:08:33:6b:f5:fa:
00:7f:f7:c1:cc:bd:5a:2e:8b:e0:27:c3:27:eb:e9:
3d:26:5f:4b:c9:33:16:00:9a:f7:d0:d1:4e:01:31:
ac:e6:70:70:d6:d7:3c:97:e3:a6:cf:78:05:0d:68:
0e:0a:97:db:0b:96:e8:aa:cb:01:6f:8b:6e:80:5c:
97:e7:9d:5f:b5:8b:67:46:08:a2:c6:9e:47:b9:b6:
ec:ae:cd:d5:8f:65:80:f7:11:6e:b5:8a:40:9f:bc:
d7:da:12:b8:24:90:7e:d7:d6:ed:55:b0:51:5c:ba:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:E8:65:4B:8A:99:2A:1A:A4:EA:6A:55:24:EC:24:CC:A6:D4:CB
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:ed:52:9b:4d:d2:d9:14:0a:60:87:04:b1:17:da:da:19:
d7:35:0c:f3:76:44:65:3c:39:3d:bc:4f:75:1a:08:be:22:6c:
fb:a3:0e:69:47:ff:84:7e:71:a5:57:30:42:2a:81:8b:d9:1e:
b9:83:d9:7e:29:b1:1f:40:5f:d8:81:42:7b:41:e3:b2:d2:98:
97:15:09:c4:c3:15:e5:ad:7b:9e:ba:0d:f5:30:62:ae:3d:07:
dd:00:e8:e3:0f:c2:ef:94:7d:11:11:81:d6:75:96:06:a4:20:
9c:e6:19:5f:94:f9:87:a5:3c:17:09:fa:8e:cf:60:7f:fe:42:
a0:a1:42:53:2c:e3:fa:c9:b4:c1:f8:05:e1:3e:dd:fc:44:0c:
c9:72:f7:0e:c3:23:a7:79:6e:fb:56:54:a1:93:59:0b:07:c5:
31:07:f0:bb:27:00:52:3e:a0:ae:87:6e:ea:90:9e:e3:92:95:
98:cd:82:2d:3b:b6:93:d6:fb:e5:e0:a1:73:c6:51:d0:35:30:
b7:86:e0:17:f1:98:5c:00:d9:d7:2f:3a:33:5b:3a:de:f0:89:
07:2a:71:36:47:a1:fc:b8:34:eb:e8:4b:88:73:09:68:86:89:
01:3a:8a:60:3f:e3:e0:60:57:c0:3e:fe:ce:cc:2d:a9:b8:96:
de:1b:f8:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDMz9I5YLjwVyWt23kWrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5
ZTU3ZmMwHhcNMjUwNjA3MTEwMDQyWhcNMjUwNjA4MTEwMDQyWjAzMTEwLwYDVQQD
EygyYzUyZTg2NTRiOGE5OTJhMWFhNGVhNmE1NTI0ZWMyNGNjYTZkNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CSE+0F0YPpqQcy1lvqYBtRmlmi6
nEw4eJzKAc7mEVU+r42gjYWwHJzKaXdvKoq1rW2/BD1xv0pTL4fSXkxQbLyGF1kj
RnSMkwK9llYpI/1lk94iu9F8iMDfMD3KNOg5ykN+GfFcM4ygIWG+xA2h0ZomCMo3
SrVRspitP7gHvCU9rhQc5bxcj33su5DefnlpCDNr9foAf/fBzL1aLovgJ8Mn6+k9
Jl9LyTMWAJr30NFOATGs5nBw1tc8l+Omz3gFDWgOCpfbC5boqssBb4tugFyX551f
tYtnRgiixp5Hubbsrs3Vj2WA9xFutYpAn7zX2hK4JJB+19btVbBRXLpX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxS6GVLipkqGqTqalUk7CTMptTLMB8GA1UdIwQY
MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut
MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3
LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQTtUptN
0tkUCmCHBLEX2toZ1zUM83ZEZTw5PbxPdRoIviJs+6MOaUf/hH5xpVcwQiqBi9ke
uYPZfimxH0Bf2IFCe0HjstKYlxUJxMMV5a17nroN9TBirj0H3QDo4w/C75R9ERGB
1nWWBqQgnOYZX5T5h6U8Fwn6js9gf/5CoKFCUyzj+sm0wfgF4T7d/EQMyXL3DsMj
p3lu+1ZUoZNZCwfFMQfwuycAUj6grodu6pCe45KVmM2CLTu2k9b75eChc8ZR0DUw
t4bgF/GYXADZ1y86M1s63vCJBypxNkeh/Lg06+hLiHMJaIaJATqKYD/j4GBXwD7+
zswtqbiW3hv4kg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:19 2025 by rpki-client