Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: D4ButBLib78Fn33Wi5TaSebb1RELHpPo4ab7VqqB9pY=
Subject key identifier: D6:19:8E:9F:21:94:AC:A8:F8:5D:FC:74:E3:F6:32:90:C2:1D:58:40
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 0198A15FAD2F6B218F9127618C8E043A14C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1239
Signing time: Wed 13 Aug 2025 03:00:58 +0000
Manifest this update: Wed 13 Aug 2025 03:00:58 +0000
Manifest next update: Thu 14 Aug 2025 03:00:58 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: S2OlSSbtMeIVHf/hR4/o4fk5j3NH1RcgLE0zm8UDNuM=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:ad:2f:6b:21:8f:91:27:61:8c:8e:04:3a:14:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Aug 13 03:00:58 2025 GMT
Not After : Aug 14 03:00:58 2025 GMT
Subject: CN=d6198e9f2194aca8f85dfc74e3f63290c21d5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:80:10:8f:72:0a:ae:f4:45:bd:3d:06:08:
ea:a8:84:53:25:3b:da:7e:7a:0e:59:14:73:21:7f:
08:b1:6d:3a:fb:5a:27:b1:60:d6:b9:e7:5f:50:8e:
bb:b3:71:e7:f6:ea:51:e4:a6:9f:91:50:7a:15:40:
11:65:4e:d2:46:b6:73:82:2b:e3:35:ef:49:79:c7:
6c:b6:02:c5:35:e3:12:4d:bf:72:91:2a:8b:bf:68:
ea:05:3f:bd:8c:8a:e2:51:06:03:18:a9:62:fe:e6:
dc:bb:99:57:e7:d4:5f:2d:b8:45:c3:cf:ea:83:6e:
9b:d1:7c:b3:85:94:3e:bb:c8:86:f5:0f:2c:c0:aa:
9b:8d:87:46:c2:f8:b3:d0:14:fb:d8:41:50:7a:55:
dd:ed:6a:2e:7f:91:aa:d0:a7:8b:1f:2b:ef:19:42:
2d:cb:b8:58:20:b0:d4:72:4c:9d:35:aa:24:e6:91:
08:dd:0c:1c:d5:1c:e5:3e:63:a7:65:dc:fa:6f:96:
96:d2:66:70:8c:ea:bd:d6:d6:2b:bf:8a:96:76:76:
62:a8:a9:48:26:93:99:86:98:30:35:8a:b1:4c:20:
77:d1:00:85:e6:db:41:15:ac:9c:46:a4:9a:f5:98:
f0:c5:bb:80:01:0b:91:02:13:89:f8:ea:f3:a1:fc:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:8E:9F:21:94:AC:A8:F8:5D:FC:74:E3:F6:32:90:C2:1D:58:40
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:14:c5:56:71:3f:3a:fa:ad:0b:38:1c:2d:6b:17:26:52:6f:
61:ee:5a:c1:7e:ce:2f:c7:68:f2:d5:97:bf:7e:d0:00:97:85:
61:4c:5f:be:bd:0f:9b:d4:ca:9d:36:87:29:12:8b:7f:3a:e6:
36:c2:95:51:97:2d:ec:8f:8c:fc:99:b5:fb:23:4c:d3:0e:2b:
f4:3b:15:48:cb:0d:b2:3e:45:b0:67:e4:3b:c5:24:06:b8:f7:
81:74:a3:d9:25:eb:2f:c3:c2:8b:4a:79:67:72:8a:23:8a:06:
d4:f5:29:38:e4:8e:91:08:49:6f:33:d9:62:0d:17:60:59:1b:
7c:92:8c:bc:54:e8:c1:2d:72:d8:90:ee:89:5f:78:58:ef:0a:
a0:be:88:18:24:80:4d:8e:ac:ae:05:66:a6:0f:b6:df:6b:03:
4a:04:4d:a5:e6:23:1e:db:1a:a8:be:95:bc:7d:50:1a:86:54:
d5:8e:08:7c:fc:bd:1e:d8:f6:b8:a4:7a:3c:08:c2:97:10:ac:
18:25:28:4b:cd:28:b9:01:85:a8:a5:6d:22:30:30:7a:c4:f5:
45:1f:d7:66:f6:80:d7:8f:4e:f8:f2:e3:d4:57:5a:33:3e:57:
b5:95:65:7a:5a:c1:29:0e:a0:24:7d:78:5a:94:f0:53:19:ad:
4c:67:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:06 2025 by rpki-client