Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: Q2dQrtj1kX/0gEPePqKWgbuj0IhhMalDuoZZBhZczyk=
Subject key identifier: 5A:74:1B:A1:4E:3B:D7:E2:CD:0B:D6:10:4B:7D:AE:96:DE:6B:06:F9
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 01988E4722F15615B8CE4409BAC00AEA7E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 10:01:23 +0000
Manifest this update: Sat 09 Aug 2025 10:01:23 +0000
Manifest next update: Sun 10 Aug 2025 10:01:23 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: P+FToMsRJGXRxyWPXpa4N/qrDmRJmCgIIiglRFxAkh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:22:f1:56:15:b8:ce:44:09:ba:c0:0a:ea:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Aug 9 10:01:23 2025 GMT
Not After : Aug 10 10:01:23 2025 GMT
Subject: CN=5a741ba14e3bd7e2cd0bd6104b7dae96de6b06f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:2b:f2:5d:58:b4:12:76:0c:3f:ee:d2:e9:
70:df:8f:b6:0c:ca:8a:04:14:c6:76:8e:3e:44:e8:
99:3a:e8:d8:7a:a6:25:ee:3c:a5:aa:10:58:15:b5:
a1:f2:93:85:81:d0:15:26:e2:98:5d:1c:39:eb:9d:
d4:5a:ee:4c:d3:7a:9b:d4:74:d7:43:b4:20:1f:a2:
3e:80:86:18:34:18:fb:4f:92:b4:da:ab:72:97:2c:
48:1d:17:49:12:ae:21:29:40:7b:73:51:f1:30:a6:
45:f5:aa:47:8a:4e:c0:4f:b5:78:fa:31:2d:9f:f0:
7e:41:c3:38:fe:72:fe:64:ca:08:3a:b5:d6:3d:f7:
d8:6e:2b:04:5c:33:1a:1a:88:f0:ee:47:ba:23:d0:
7a:9d:59:53:47:38:4c:36:29:22:18:d0:45:0d:8a:
ff:3c:2f:3f:ff:67:12:62:e7:dd:04:c8:7b:51:59:
62:e9:63:b4:6f:41:07:b7:a2:59:ec:78:62:ab:d8:
94:44:dc:36:a2:43:9b:e3:82:95:a7:e0:84:d2:4c:
00:46:00:58:38:90:21:fb:04:19:cd:cb:6d:3c:51:
4d:46:0d:2c:35:42:02:01:53:7a:7f:c0:08:35:6e:
9e:de:5f:82:b2:39:79:d0:40:9d:bf:93:e6:3b:70:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:1B:A1:4E:3B:D7:E2:CD:0B:D6:10:4B:7D:AE:96:DE:6B:06:F9
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:12:8b:40:00:72:2d:45:8d:8d:37:e0:43:55:e0:2e:f6:
85:34:ae:4e:62:71:2a:4c:ae:b6:71:b1:74:30:bb:3e:d6:ef:
2a:98:f1:4e:fd:67:5d:bf:3a:42:a2:02:65:a5:e5:21:f4:4e:
c2:c0:29:59:df:eb:52:12:f5:b2:34:c6:e2:9f:0d:34:75:59:
76:55:f0:1e:e8:ac:e0:f5:bf:48:1b:50:1e:17:8a:00:2f:67:
6d:7a:3f:c5:0d:bf:ff:86:de:11:ef:5b:7c:d2:b7:fd:01:dc:
b8:5a:bb:10:12:0d:58:20:d7:25:4f:dd:4d:b7:24:67:88:f4:
29:43:61:3d:09:2f:24:81:5b:3a:ad:35:1a:70:ab:55:75:de:
f9:da:63:b5:18:99:00:3c:a3:4b:b1:e0:b1:aa:89:08:6d:bd:
d7:81:fc:cd:36:f9:01:fa:ef:b3:f3:5a:70:ef:7a:9b:4c:18:
67:2e:ee:1f:17:68:62:ab:96:30:49:e6:3d:92:0b:e6:d0:4b:
45:37:02:5b:27:8a:bf:20:ff:f3:1d:69:af:83:b3:32:e4:2e:
ee:e1:96:e2:9e:60:89:d3:40:51:b0:5b:56:f2:5e:1d:0b:b0:
82:6c:1b:f4:a4:0b:5b:32:67:be:1c:53:52:63:75:4e:14:8f:
cc:c9:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:03 2025 by rpki-client