Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: LmqZGLwBh9Q/rKGbXYb+PrJMCGFNB6nkDIqLaYkqNkk=
Subject key identifier: 99:3D:41:CA:CB:58:FE:1E:8B:37:FB:8A:FD:9D:01:9C:8D:B5:25:31
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01989FDF13A7DD83E1D596D35F5A71F184CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 123D
Signing time: Tue 12 Aug 2025 20:00:53 +0000
Manifest this update: Tue 12 Aug 2025 20:00:53 +0000
Manifest next update: Wed 13 Aug 2025 20:00:53 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: VknYDUQEWELeNACUIsbzC3PVG8MQkoXvIvLXSzKRks4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:13:a7:dd:83:e1:d5:96:d3:5f:5a:71:f1:84:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Aug 12 20:00:53 2025 GMT
Not After : Aug 13 20:00:53 2025 GMT
Subject: CN=993d41cacb58fe1e8b37fb8afd9d019c8db52531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:60:40:ab:81:40:90:1b:4b:1e:3c:12:b3:
e5:69:51:f2:43:aa:9e:d8:49:f1:6b:e9:95:47:c2:
cb:1a:98:82:14:96:90:92:c8:6b:f8:58:4b:f8:5a:
4b:7d:a0:62:8b:df:ce:83:ff:66:88:89:d2:93:22:
de:58:9e:f9:64:46:0e:9e:e0:40:7c:6f:e9:ab:81:
29:05:c4:c2:7f:1c:8e:f3:66:9c:ff:ca:2c:dd:2b:
62:ad:52:33:5b:a8:c7:89:8f:79:1e:33:73:9a:e2:
47:e6:79:3c:a6:74:a9:d2:e3:01:3d:d5:5b:02:35:
dc:f8:b7:55:f0:c9:14:29:3a:4c:c6:9e:c4:c1:70:
66:b8:91:df:2b:9a:ba:dd:58:38:5f:48:00:56:14:
f0:be:e2:05:52:ab:09:8b:86:d8:c6:36:b0:3c:2a:
73:f6:da:9b:c1:db:74:00:62:86:2f:46:fb:88:f4:
02:a5:1c:0f:a8:12:12:be:8e:d5:68:ad:90:f1:1b:
8b:54:b3:9e:b3:a8:70:c1:65:b1:68:81:f3:c3:fb:
35:37:0e:2a:b1:a0:29:ff:a6:d1:c2:9f:3d:b0:9e:
3f:34:9d:7f:ac:1b:00:c5:d6:f6:77:ea:ca:c5:54:
b8:d7:8a:c1:0d:28:6c:49:16:4a:2e:46:8d:9a:01:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:41:CA:CB:58:FE:1E:8B:37:FB:8A:FD:9D:01:9C:8D:B5:25:31
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:84:b0:4d:9a:61:29:b9:cc:79:68:85:93:c7:3a:d7:ed:44:
00:1f:e3:a3:45:18:70:5f:5a:b4:4a:47:d0:f2:f5:b0:1e:21:
63:a9:e6:23:1d:7e:7a:40:ed:29:02:21:8f:da:05:f5:de:e3:
88:3d:27:80:1e:71:c6:16:c3:a3:da:c5:5f:4f:e7:f8:67:b7:
e9:f6:bb:a2:ec:1d:7b:95:bd:80:f5:e1:3f:87:1a:f4:bd:19:
4d:a4:bd:d0:9a:c2:3c:52:0b:38:54:8d:9a:2f:55:c7:a8:84:
05:f2:b4:5b:2b:a7:ac:36:9c:27:01:72:82:7b:85:e8:5e:ca:
be:e2:c1:8c:af:fa:2b:f6:90:ea:e3:f4:28:a4:9b:9b:29:32:
92:60:f5:3a:99:98:f4:fd:9d:c6:ef:7b:1c:ea:01:d8:81:cc:
5c:8b:63:e2:81:30:f8:24:36:06:dd:08:92:64:db:1d:6a:31:
48:56:d6:75:18:d2:26:c0:5e:a7:4a:5f:3b:f8:84:75:35:1e:
72:bd:f3:3d:2a:d6:70:73:3e:aa:1f:1f:72:3b:0a:5c:6a:40:
c1:73:f7:bb:ee:9f:bb:2a:ab:d5:8b:b2:69:0a:83:9b:97:74:
13:fe:3b:da:5b:ce:9f:fd:d3:61:ee:25:91:25:ae:9a:9c:cc:
17:90:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:00 2025 by rpki-client