Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: VDPKdAfPr3IsYjgltIASMfFcGlYuTFsaGFPkb2iTr1E=
Subject key identifier: B3:EA:94:5A:FD:BE:02:F6:9A:D3:29:56:0C:05:9A:DD:1F:71:37:9B
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01993870B2EBBE65080510023E8BC5EA7DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0F88
Signing time: Thu 11 Sep 2025 11:02:13 +0000
Manifest this update: Thu 11 Sep 2025 11:02:13 +0000
Manifest next update: Fri 12 Sep 2025 11:02:13 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: VbvjRKxVPpbL+ijFJ/HLivCBeHEcHHOEak72ZypG3XU=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:b2:eb:be:65:08:05:10:02:3e:8b:c5:ea:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Sep 11 11:02:13 2025 GMT
Not After : Sep 12 11:02:13 2025 GMT
Subject: CN=b3ea945afdbe02f69ad329560c059add1f71379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:a5:64:a5:00:51:c4:bd:c8:2d:3e:7d:09:
47:d4:74:b0:db:69:a9:65:1c:9c:8c:31:96:18:ab:
96:51:e8:7c:8c:25:9f:85:87:a5:94:f7:87:1c:75:
c0:e3:37:fc:74:82:9d:bf:73:02:59:95:30:20:da:
3a:4e:21:d2:ea:44:82:bb:eb:0a:84:f9:95:41:2a:
5b:41:66:9b:09:30:2e:5a:f4:af:86:f9:c6:63:59:
b1:01:25:70:bc:42:ad:9e:c7:66:31:6a:1b:11:3e:
ef:17:70:a5:3c:4c:83:aa:d3:55:64:ce:65:b4:d8:
53:bf:f0:f6:b0:e4:c8:e4:11:e3:3b:36:26:65:dc:
eb:3b:2b:73:38:cd:69:30:f2:0d:e9:9a:7a:24:9f:
3e:fe:3d:93:02:ef:01:26:a9:5f:9c:89:b1:29:fd:
df:71:e2:5f:64:d4:d2:b4:4e:6b:79:fa:a6:f3:5a:
6d:ec:1a:25:cc:90:4c:38:d6:fe:71:13:7e:32:67:
a4:01:9b:b3:ee:9e:7a:81:94:25:dd:1d:dd:ef:ca:
14:f4:64:85:7b:a5:63:5b:ae:12:49:d2:2a:a6:01:
c4:88:01:ed:f9:9c:0a:2f:63:1a:37:4e:f8:bf:4d:
57:5b:1b:41:0d:c6:a7:74:b5:cc:c8:a8:69:c9:0c:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:94:5A:FD:BE:02:F6:9A:D3:29:56:0C:05:9A:DD:1F:71:37:9B
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:6d:36:2a:f2:f2:af:2b:cd:36:78:97:45:06:a1:e4:14:
5c:98:60:17:c5:56:95:f8:2c:86:51:32:29:cd:04:17:62:57:
ef:ba:6a:9d:3e:a5:d7:5e:23:e9:52:5d:5f:3b:de:46:f0:e5:
a2:b4:81:b9:c0:89:42:95:51:93:91:48:b0:7e:50:ef:f3:f3:
bf:94:85:b3:ef:55:1d:7f:1e:4a:e3:37:4a:1c:cf:8b:31:17:
50:f6:a3:3c:f3:3d:2a:1b:b1:03:47:a1:1d:a1:1b:5c:23:db:
b7:55:ee:6a:1a:81:57:34:ea:f3:7f:df:27:7a:93:44:67:d6:
4d:54:8a:26:b2:52:08:48:4f:54:68:c9:41:1d:2b:18:ec:4a:
0f:42:5f:03:40:e5:09:03:cb:be:5e:2d:69:a2:f9:79:35:1a:
5e:80:c2:1a:b6:88:b2:43:25:e2:da:b9:95:bb:2c:8e:8f:cb:
8f:ef:dc:89:a5:4d:d3:5a:98:98:e7:ae:4a:88:9a:15:5e:c5:
b3:64:11:c8:6e:30:16:76:ce:51:5d:94:b1:68:59:31:bb:05:
ff:2b:d3:f1:00:2d:b0:4e:92:47:4e:a1:fa:75:2c:e4:e2:4d:
eb:15:ef:cc:8c:71:10:ee:93:39:5c:12:ee:76:24:2f:05:18:
6b:b2:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:25:04 2025 by rpki-client