Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 7dZolQB2/xi3k16y529xFScWQtu3fZIDOqSoi+fxtFI=
Subject key identifier: 5D:E7:F0:24:B7:2B:2B:A2:5C:04:DF:2C:7B:5F:5D:4D:B8:0A:EC:8C
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019A71EE9EE76299FB82472E731764C3E6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0D54
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: 3Ro5lPRXN/WoUz+q0sVlkhV1kiJH5wVpWGaWwMkKahA=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:e7:62:99:fb:82:47:2e:73:17:64:c3:e6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=5de7f024b72b2ba25c04df2c7b5f5d4db80aec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:ec:8a:3f:7a:65:f0:63:b1:c8:4b:23:13:
e8:33:6a:36:8e:53:80:3e:99:ea:92:85:28:f7:b9:
6c:d2:e3:ea:1f:f3:90:c8:a4:68:bf:44:c5:90:28:
88:0a:3c:cd:5f:6b:d1:00:a0:fe:66:98:6b:40:bc:
2d:b5:71:da:9f:3b:3e:dd:be:6c:75:0b:b9:e4:af:
d0:7f:74:28:d7:77:e2:78:f9:f9:16:93:d9:e9:f2:
42:3d:bd:c7:17:25:6c:6c:e2:1e:4c:b2:4a:04:3a:
a6:2e:f6:3b:90:71:08:19:c9:18:f9:20:79:ba:c8:
c8:f3:86:74:50:59:31:7e:2b:86:c5:f0:75:8b:04:
36:b0:5a:d1:0c:07:03:14:29:bd:a9:da:9a:29:58:
2d:b0:04:ee:20:fc:68:67:02:b6:37:9f:3e:91:e1:
b5:24:29:a3:27:da:fc:76:50:8d:1d:53:76:78:a4:
42:66:12:7e:19:aa:30:4e:7a:36:bf:74:db:75:03:
25:50:42:33:73:e8:26:c9:12:0a:97:c0:d6:42:8d:
8f:7e:54:82:3f:17:3c:06:cd:e4:5e:c9:69:96:28:
1e:c2:e5:e9:db:8b:88:e5:34:16:47:f0:a7:ba:33:
b2:2c:72:ce:4a:7e:da:8c:9a:9c:99:15:24:68:51:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:F0:24:B7:2B:2B:A2:5C:04:DF:2C:7B:5F:5D:4D:B8:0A:EC:8C
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:fe:f9:37:cc:e2:ca:01:c4:08:e7:7b:07:92:e7:e1:3f:
3c:a4:2c:06:35:ed:b9:21:16:26:43:66:f3:0d:9f:18:11:c5:
d8:2b:99:ee:0c:e9:9a:6a:ff:19:27:13:6a:1d:75:31:02:b7:
30:f3:6d:94:64:f7:e2:5f:0b:b0:b1:47:3f:64:0e:cf:f7:8c:
20:de:74:e1:8e:2f:cf:2e:fc:be:38:83:e1:81:d5:7d:f8:d5:
38:71:91:3b:c0:0b:9a:fb:c9:98:63:f8:fb:c5:fc:23:a6:94:
21:2b:1d:73:5a:3d:38:1f:24:f9:57:2f:24:07:fd:3e:1b:27:
a9:52:67:a3:98:0e:a4:59:de:16:9c:d9:f2:d3:03:df:41:3a:
84:21:00:c4:10:78:f8:e7:5a:00:c4:7d:40:a0:9c:24:d8:1c:
08:28:80:4f:fc:e5:97:da:c5:b2:6b:90:88:8f:3a:7e:e5:8d:
1b:28:b4:6f:fe:fc:a9:23:5d:ab:0e:73:70:03:62:60:db:a7:
2e:5e:31:ea:cb:a7:53:e8:64:ff:df:c8:c8:73:e4:ba:f6:96:
38:d6:7f:12:88:d7:35:85:b2:3a:b4:8c:19:48:3a:ed:13:1a:
88:aa:cf:84:5b:d9:b6:3d:15:0c:ba:39:6c:68:ec:e0:b7:ad:
a8:08:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:05 2025 by rpki-client