Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: KqzAjlxY6Mw4CL8QHa3z0Ci/i9MFTD651OaEZCeioGM=
Subject key identifier: 54:EE:C4:75:2D:4D:95:A3:55:88:B1:84:AF:05:E1:8A:41:07:19:94
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01976CCFC87D3C914593A6C3F15553C2B80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 119E
Signing time: Sat 14 Jun 2025 05:00:45 +0000
Manifest this update: Sat 14 Jun 2025 05:00:45 +0000
Manifest next update: Sun 15 Jun 2025 05:00:45 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: 1QryRFcnhKkcorIP/KIVqYIPLkkdtE7L5BFKKcGqes4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c8:7d:3c:91:45:93:a6:c3:f1:55:53:c2:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Jun 14 05:00:45 2025 GMT
Not After : Jun 15 05:00:45 2025 GMT
Subject: CN=54eec4752d4d95a35588b184af05e18a41071994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:62:3f:32:eb:28:9b:f1:51:92:96:77:70:
31:f2:4f:bd:41:db:d2:e7:f9:73:e8:7f:76:74:1c:
eb:7b:8d:6a:c0:38:60:aa:ad:b5:96:b1:dc:01:e9:
c9:e5:ad:89:61:af:d8:a7:bf:09:84:32:02:0f:20:
36:17:98:9c:2b:c2:e4:f9:f8:4b:99:f4:f2:47:6c:
7c:ce:f5:cd:45:ec:2b:d3:6a:ef:01:4b:78:ce:9b:
08:5c:c4:59:02:12:c7:c3:2e:d6:43:eb:48:63:8e:
08:76:38:23:7e:ba:4d:ef:7c:61:04:38:23:89:d3:
49:d5:67:e1:81:19:22:f0:2a:91:2a:8f:0e:90:af:
18:f3:8e:f0:11:8a:a0:77:aa:c3:4c:03:b7:38:13:
6e:ec:c7:9e:63:ea:ab:68:7a:d9:48:ec:91:7c:0c:
b3:af:7f:5d:de:61:e3:e1:25:36:aa:1f:cf:f0:6b:
38:7d:e9:46:be:73:3d:b0:e3:b5:31:f7:28:29:9e:
cb:34:64:fa:9c:95:06:84:11:7d:4e:70:6e:1b:04:
d3:32:df:c2:6b:4b:7d:57:1b:23:3a:6d:50:f0:a7:
13:96:1b:74:ee:7d:ca:cb:1f:08:9e:52:09:73:18:
dc:2b:29:e9:d9:7f:ca:24:4a:00:f7:a4:68:8c:61:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:C4:75:2D:4D:95:A3:55:88:B1:84:AF:05:E1:8A:41:07:19:94
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:63:cf:1e:d7:91:55:24:4c:c7:89:45:07:fb:cf:a5:7d:42:
0e:d5:85:90:39:1a:72:23:c2:e1:85:3e:45:2d:ee:68:a4:de:
a9:9b:c6:df:f5:04:71:f6:a2:6a:90:b9:d8:7a:70:39:97:e8:
63:0e:7e:5b:db:c9:68:34:88:24:b5:6b:52:7e:83:5b:6f:ca:
66:d6:3b:97:35:e9:4f:ee:99:be:26:84:00:c0:f0:eb:3e:3f:
bf:c6:ee:6c:00:94:2f:ed:04:ba:ce:f3:d1:c8:b8:62:7c:0b:
48:1c:28:67:c1:77:86:ba:ed:a3:20:93:27:83:a8:c8:07:3d:
57:1d:f1:67:65:7d:31:9a:4a:bb:f5:68:92:b1:64:0b:d9:4a:
c6:dd:a5:b6:dc:4a:ca:68:d0:c5:45:13:eb:6c:61:cb:4a:4b:
65:da:f8:8a:40:6d:0c:b1:31:87:1b:7b:03:54:af:9d:46:35:
d5:e7:94:c8:3b:d2:86:2b:64:2d:a6:18:24:8e:2a:0e:7a:84:
ec:e9:c0:d8:ea:26:8f:38:ca:3e:80:16:d5:05:e6:fb:0f:b2:
75:ab:3f:10:24:af:02:32:85:05:77:a4:60:86:7d:74:c9:77:
44:18:3a:c2:d5:34:42:6b:7b:e3:9d:c0:c6:f1:b0:6e:de:71:
75:11:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:10 2025 by rpki-client