Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: 04E9ET8nRzV2oKURCebxpz7zipO5SKfYRd99VtCGJ+I=
Subject key identifier: 28:A4:0B:B6:FE:A9:7B:2B:16:85:1E:87:6F:CF:44:64:EF:86:CA:75
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 01976BBD2D737465185D80B62187E45535FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 078E
Signing time: Sat 14 Jun 2025 00:00:49 +0000
Manifest this update: Sat 14 Jun 2025 00:00:49 +0000
Manifest next update: Sun 15 Jun 2025 00:00:49 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: LxcT4Uw0aeMUrCj5/4htP7XYdQJTZ1tlunCWtGmPvb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:2d:73:74:65:18:5d:80:b6:21:87:e4:55:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Jun 14 00:00:49 2025 GMT
Not After : Jun 15 00:00:49 2025 GMT
Subject: CN=28a40bb6fea97b2b16851e876fcf4464ef86ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:00:d4:7e:5d:b4:e6:32:a9:03:57:f2:b6:
4d:5c:39:84:e0:ae:ea:04:cd:7d:a8:13:c7:2d:13:
6e:44:a8:ba:54:01:d5:d1:36:07:b1:b6:67:62:25:
9d:aa:f5:60:4a:de:80:a8:30:34:0a:e4:c1:22:82:
d7:c7:27:14:5e:b6:bf:dd:bc:3a:6f:2a:4b:22:76:
45:a9:4c:0a:aa:a3:78:fe:4b:27:f9:9f:7e:37:3b:
50:f3:99:f4:43:3c:25:96:90:1b:cf:db:c5:8b:6d:
f7:42:88:b5:7a:3b:37:2d:f1:95:3e:06:d0:ed:59:
29:87:90:33:67:0e:ce:bf:dd:08:cd:87:c8:ab:90:
e6:8e:33:be:85:76:ee:5c:58:7b:5d:a9:5b:79:11:
15:4e:76:88:93:ce:62:43:f6:e0:23:f3:4d:a3:e3:
db:00:50:9c:2f:0c:c4:5e:bb:4d:5e:5c:50:11:5b:
eb:ce:7c:2c:2a:ef:f4:1d:18:4c:e7:8b:21:c9:84:
c1:77:e2:ff:aa:62:bf:d3:d9:13:e3:3b:8c:44:b5:
83:d4:9b:5e:dc:c7:b3:7d:33:7e:d1:51:10:09:56:
12:3e:89:8e:c8:8e:b3:74:e3:c1:51:68:e7:8d:d0:
24:31:c4:e2:4a:f3:4f:4e:4f:c8:b8:e9:67:d3:05:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A4:0B:B6:FE:A9:7B:2B:16:85:1E:87:6F:CF:44:64:EF:86:CA:75
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:03:bb:a3:58:d3:20:2a:54:51:be:9d:ba:d1:2c:9d:19:80:
3c:95:cd:f8:ce:e0:47:15:a1:35:06:b4:b9:ea:40:bb:9f:87:
a6:83:17:a4:27:7e:4e:5e:29:da:0e:f5:42:5a:07:87:ed:04:
1f:7e:90:98:3f:2d:94:07:15:01:3b:68:10:7c:ca:99:e4:32:
55:e5:1b:a3:f8:41:43:d4:c3:3f:b7:fa:f7:4b:32:00:de:7b:
c3:93:64:99:6b:20:21:be:59:f7:b8:d8:8e:c7:62:3a:68:c7:
e3:66:85:f1:30:e5:f0:21:fb:0e:04:fd:cb:96:b8:27:b5:7b:
55:72:a4:25:34:b3:80:9b:83:33:70:1b:5a:ff:90:02:a2:a1:
89:4d:de:18:2f:2e:0f:fe:cd:df:8f:b8:85:08:f1:55:d7:eb:
05:15:ad:35:35:06:53:c0:2b:15:77:a1:f6:5c:b3:35:d5:81:
f6:c1:b1:e3:27:fd:e2:68:86:34:ef:c6:db:4e:c5:ed:8f:44:
c9:d1:a4:13:1e:fe:70:0a:88:f0:b0:b3:68:c2:ad:dd:b2:35:
f4:bd:49:3e:96:21:d3:d6:ba:e6:d7:da:58:f6:aa:15:89:3d:
34:2c:a6:f1:7d:29:7a:25:f2:2b:24:d7:0a:19:e1:c4:3b:53:
39:86:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:57 2025 by rpki-client