Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 8YTKUXFF0cojySM+0pC9kJxLNVVCnzIXfW1FwRMmLEo=
Subject key identifier: 8A:24:44:7A:71:DF:AD:C9:19:0F:37:A9:08:AF:09:05:04:1C:13:F1
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019921E75662303941F12D49BE68AEC27213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0CA6
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: Z8fJ+sLTQcURV6av+mGabNJghWdzg2WwOc+S2ccohDY=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:56:62:30:39:41:f1:2d:49:be:68:ae:c2:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=8a24447a71dfadc9190f37a908af0905041c13f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:25:53:9a:b7:59:fb:c8:66:02:f3:7e:69:
ef:48:dc:c3:01:a7:d6:90:38:94:5d:04:9e:18:6c:
46:39:d9:9a:be:0e:b0:a0:1a:8a:a3:05:ba:89:fa:
81:9b:09:06:cd:37:89:61:6d:cf:68:15:f3:44:13:
e7:f4:42:e2:ba:9a:3c:3a:6d:95:88:22:d0:2c:5e:
32:6b:c4:04:67:68:8d:a7:bc:cd:ba:cb:dc:95:ea:
21:04:12:14:29:7f:af:46:30:3d:7e:a2:02:be:86:
66:9c:da:80:00:74:cd:f8:72:47:c8:52:c0:47:44:
7e:77:58:3a:f7:07:4b:bf:c5:2a:72:99:a3:f9:9b:
af:db:9a:44:b8:6f:b9:7f:49:c7:04:21:6a:f7:76:
5d:d6:04:01:3d:e2:ff:3c:49:46:5f:a8:18:06:17:
4d:e9:1d:23:af:d3:4b:2a:cb:26:1b:f8:7b:0f:dc:
d7:10:6d:46:96:b0:22:b6:a7:e6:6b:95:69:51:b6:
23:f9:94:7e:bc:6c:b7:82:20:3e:95:95:85:73:af:
18:07:fe:24:b1:6a:dc:18:7a:4e:93:04:b0:04:2b:
6d:30:4f:43:22:f7:2e:b8:b8:60:1e:98:3e:86:fd:
56:be:ad:47:75:d1:68:c1:95:99:10:32:1b:e7:0c:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:24:44:7A:71:DF:AD:C9:19:0F:37:A9:08:AF:09:05:04:1C:13:F1
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:b8:7a:a7:6b:40:6b:09:46:86:41:b7:58:ac:cc:94:20:
e1:b8:84:ca:2b:5b:ff:e0:33:01:26:db:f1:5d:1e:bb:75:24:
8b:15:69:a7:ee:79:f7:48:04:be:0d:48:a6:01:6f:97:1d:d4:
31:85:f3:86:ae:88:7b:ee:76:78:f6:b1:69:65:8a:2c:1a:d5:
0a:3e:54:49:39:93:34:6b:45:84:dc:59:73:fc:b6:8f:9d:64:
d4:15:48:65:0f:02:c9:bd:ed:c9:94:00:8c:f1:d3:e5:8d:23:
7c:b1:c9:10:0b:57:fd:e5:1d:85:de:5f:13:40:61:41:b6:a6:
fe:14:8e:ac:34:aa:f5:68:3b:27:01:fc:1a:7f:b4:a1:b5:69:
49:04:5a:44:a8:e5:51:67:f5:5e:db:39:34:06:7d:9e:06:5b:
ff:1f:56:31:c7:02:4a:0a:c3:35:a0:38:1f:1d:d2:a6:53:c5:
56:bc:19:58:e9:3b:9d:a0:5d:2e:ed:a2:ab:13:59:3f:2f:b9:
e3:a3:c6:93:e6:90:a3:bd:84:24:22:ec:c5:61:b1:ac:6f:0b:
bd:bd:6b:ba:3c:e1:cc:52:02:36:88:47:02:8d:a2:e1:e9:a8:
c6:7d:f1:0f:bb:d0:8f:0f:8c:27:28:c9:d0:2c:9f:bf:44:b5:
61:f1:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:31 2025 by rpki-client