Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: qeg8pGNPuGt7wMZ/LQURLviGu4zVEvSrR0WoJwgcqJw=
Subject key identifier: 52:99:4A:7C:FF:CF:01:CE:53:48:A3:98:AB:EE:08:41:2C:C4:63:84
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019897B77B7FE4FDD0B169EF956A0EAA1BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 1010
Signing time: Mon 11 Aug 2025 06:00:40 +0000
Manifest this update: Mon 11 Aug 2025 06:00:40 +0000
Manifest next update: Tue 12 Aug 2025 06:00:40 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: hVjrl13VeNv1M5Cobgu5hDJ3HVqBFBaV7Yg0rh6penI=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:7b:7f:e4:fd:d0:b1:69:ef:95:6a:0e:aa:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Aug 11 06:00:40 2025 GMT
Not After : Aug 12 06:00:40 2025 GMT
Subject: CN=52994a7cffcf01ce5348a398abee08412cc46384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:99:93:dd:7a:b8:ca:b0:e8:fe:a1:21:fe:
2d:2c:11:b1:b0:87:79:44:4f:50:41:ff:63:81:ce:
7b:98:ff:91:78:9f:e9:f6:a0:d1:3c:97:5b:69:35:
cf:40:f9:11:bd:29:cd:f7:fb:ca:d0:18:a9:34:2d:
12:f0:bf:e4:5a:85:ca:03:82:16:f0:64:09:43:b2:
42:67:8d:56:f0:12:c8:6f:de:79:2d:a8:ad:4f:04:
57:4e:b0:23:93:aa:27:a6:3e:b4:c5:2e:3d:37:95:
20:e4:05:cd:31:f9:7f:9e:56:36:6a:98:b5:f9:18:
2e:69:a4:d9:3c:3f:80:21:92:51:32:25:bf:07:ab:
07:9f:a7:be:0f:bb:59:e7:b0:34:e3:f3:f6:ae:51:
27:21:f7:6e:95:28:7e:e8:3e:6d:c8:82:c9:b5:40:
93:10:81:91:e2:d1:03:eb:de:c2:c7:39:47:66:38:
16:62:9c:12:48:8e:97:dd:18:fa:51:36:5a:9a:ab:
39:5e:d0:1a:7e:3f:fd:e5:c2:93:b6:bc:ac:3b:28:
56:fe:e8:ad:f3:85:af:f2:a4:8e:8e:2e:51:60:e5:
de:73:0c:ad:98:6c:d2:03:4e:39:8e:17:fe:ed:6b:
76:c4:91:2c:32:2e:bf:78:85:af:1b:9c:c0:36:d1:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:4A:7C:FF:CF:01:CE:53:48:A3:98:AB:EE:08:41:2C:C4:63:84
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a8:7e:cb:26:74:c1:95:d8:f1:2f:50:aa:59:85:67:ca:03:
e6:79:7d:97:db:d4:aa:76:78:39:62:a3:c1:c5:68:5a:40:47:
84:e8:63:5a:fa:6c:28:71:5a:d2:53:4c:98:0d:7c:35:76:5a:
f6:33:71:56:f6:3c:e8:04:92:d4:15:99:52:b4:7b:41:f8:40:
b5:18:e7:c8:aa:0e:04:00:bd:cf:b8:06:46:0c:61:62:cb:c1:
82:fa:d8:83:6a:b9:e0:9b:34:3d:2e:57:b9:92:34:23:89:13:
ec:8c:ee:46:4c:4f:51:2f:81:6b:ec:15:5d:0e:82:5e:c5:2e:
fb:7b:27:13:80:da:01:53:a0:c2:64:67:29:67:2f:19:92:b7:
d2:47:f5:0f:56:f8:69:c6:48:08:bf:cd:9a:06:1a:b3:a2:18:
d5:7f:a6:ae:5a:e3:26:49:48:aa:25:5e:14:7f:6b:3a:c1:36:
3e:29:c4:ff:bd:f6:82:68:42:1b:69:10:23:61:16:d7:8d:2a:
41:f2:39:0b:d1:a4:2b:ee:98:0c:57:43:0e:d9:ca:43:c3:da:
00:f5:28:1f:ad:4d:f9:e2:3a:ba:53:89:3c:3e:74:ca:5e:db:
83:53:5e:fb:0f:61:a2:5d:b6:cb:c4:fb:f5:2f:a3:7b:58:db:
ec:3c:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:13 2025 by rpki-client