Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 7ExzN9ugcPY/bXUe8JKh1HUV79SHTUSZwuUfv61NV5A=
Subject key identifier: EF:65:E2:A2:5A:8A:A3:05:39:C0:26:05:51:A3:AE:9C:F0:0E:71:6C
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 01974AB186AC79736447344DA92F3B0AD750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0BB2
Signing time: Sat 07 Jun 2025 14:00:37 +0000
Manifest this update: Sat 07 Jun 2025 14:00:37 +0000
Manifest next update: Sun 08 Jun 2025 14:00:37 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: ny5goAMFTxFktvKQVYNsgDDDBiUADLHit6T1+hK8VOw=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:86:ac:79:73:64:47:34:4d:a9:2f:3b:0a:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Jun 7 14:00:37 2025 GMT
Not After : Jun 8 14:00:37 2025 GMT
Subject: CN=ef65e2a25a8aa30539c0260551a3ae9cf00e716c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:7e:1c:3c:66:ed:8d:8a:76:2d:cd:99:b2:
a4:2c:ee:56:62:04:89:2b:ed:84:4b:d9:da:2c:82:
66:f9:98:f3:12:1d:cf:f1:74:16:d2:3e:38:55:1d:
10:24:a2:2b:de:1f:b6:d6:47:0a:60:68:3d:25:6f:
68:80:8e:c2:60:49:fb:67:a4:3c:77:92:24:97:7e:
2d:56:04:b2:d3:18:75:7d:c6:5a:c5:da:30:18:7f:
1f:30:4f:b5:18:42:9c:7d:d9:8e:7d:80:ba:c6:7e:
1b:01:a4:96:c5:65:d0:01:5d:d3:a5:96:49:dc:b6:
00:a9:bf:2c:1b:d5:50:da:91:73:49:ab:e5:7c:eb:
9d:ec:34:53:9f:24:89:0a:f3:32:fe:d9:8b:65:c6:
ee:57:27:a2:82:36:89:be:6c:7a:04:99:ab:29:61:
3e:6b:d3:9f:3e:be:97:fa:fc:16:d3:c1:94:05:1c:
c6:52:16:e2:28:19:a0:74:18:41:b5:38:78:d3:1b:
b7:17:79:06:82:9d:f2:46:94:71:dd:43:24:cc:60:
61:3d:59:64:29:43:3c:74:cf:a4:b4:6f:3a:ea:92:
b7:de:cb:44:b9:17:d3:fa:fd:ba:49:ba:ea:70:89:
e0:5a:58:82:70:86:40:73:2b:72:ed:4c:67:3e:af:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:E2:A2:5A:8A:A3:05:39:C0:26:05:51:A3:AE:9C:F0:0E:71:6C
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:35:e6:15:96:54:39:0b:fc:dc:a3:e4:1b:e5:59:b2:c9:cc:
1c:92:a9:1b:a3:94:9e:e2:b2:52:46:8c:6d:94:93:b3:8f:8d:
5a:b6:35:fd:6a:83:c2:29:93:d7:a4:3f:b0:ad:73:97:d0:60:
4e:e3:51:70:46:c7:49:0a:c5:aa:d2:52:95:7a:65:69:04:a2:
27:06:f5:4c:cd:75:f9:01:9e:1b:bf:ab:66:29:63:2c:6b:4e:
5a:f7:6c:3b:55:2a:97:b7:06:f6:56:0c:52:76:c0:17:d8:81:
9e:4d:6f:8a:7a:c7:34:9f:0c:df:5a:9b:a4:a7:44:84:6d:93:
4a:03:a0:30:f7:d2:5e:87:a6:5f:0d:a6:0d:a3:ba:c4:b8:9d:
2a:0c:4b:a6:a4:af:27:45:2a:47:98:5f:ba:42:e2:2f:6e:90:
63:30:51:fc:a8:4c:93:5d:b9:33:1e:9b:78:32:a9:e7:6a:2d:
4a:e2:23:85:df:bf:d8:6e:37:93:04:dc:2f:ba:02:42:38:30:
b8:1e:e3:19:62:e6:65:71:66:8f:3e:8b:c3:3d:f2:e3:82:f4:
e4:a2:2b:68:82:97:a3:e0:fd:b4:b1:10:d8:14:dd:d3:ba:c0:
24:c1:c4:c4:b8:a3:4c:c8:75:bd:b1:df:5e:6f:1e:11:a1:bd:
8f:5a:b6:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsYaseXNkRzRNqS87CtdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0
ZDY0YjEwHhcNMjUwNjA3MTQwMDM3WhcNMjUwNjA4MTQwMDM3WjAzMTEwLwYDVQQD
EyhlZjY1ZTJhMjVhOGFhMzA1MzljMDI2MDU1MWEzYWU5Y2YwMGU3MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDZ+HDxm7Y2Kdi3NmbKkLO5WYgSJ
K+2ES9naLIJm+ZjzEh3P8XQW0j44VR0QJKIr3h+21kcKYGg9JW9ogI7CYEn7Z6Q8
d5Ikl34tVgSy0xh1fcZaxdowGH8fME+1GEKcfdmOfYC6xn4bAaSWxWXQAV3TpZZJ
3LYAqb8sG9VQ2pFzSavlfOud7DRTnySJCvMy/tmLZcbuVyeigjaJvmx6BJmrKWE+
a9OfPr6X+vwW08GUBRzGUhbiKBmgdBhBtTh40xu3F3kGgp3yRpRx3UMkzGBhPVlk
KUM8dM+ktG866pK33stEuRfT+v26SbrqcIngWliCcIZAcyty7UxnPq/q8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9l4qJaiqMFOcAmBVGjrpzwDnFsMB8GA1UdIwQY
MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt
NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4
LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTXmFZZU
OQv83KPkG+VZssnMHJKpG6OUnuKyUkaMbZSTs4+NWrY1/WqDwimT16Q/sK1zl9Bg
TuNRcEbHSQrFqtJSlXplaQSiJwb1TM11+QGeG7+rZiljLGtOWvdsO1Uql7cG9lYM
UnbAF9iBnk1vinrHNJ8M31qbpKdEhG2TSgOgMPfSXoemXw2mDaO6xLidKgxLpqSv
J0UqR5hfukLiL26QYzBR/KhMk125Mx6beDKp52otSuIjhd+/2G43kwTcL7oCQjgw
uB7jGWLmZXFmjz6Lwz3y44L05KIraIKXo+D9tLEQ2BTd07rAJMHExLijTMh1vbHf
Xm8eEaG9j1q2nA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:10:44 2025 by rpki-client