Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: 3x2B/FYlceWYlhKuMHMd9AB0anSffDXKY6nBBymYy+A=
Subject key identifier: 4C:67:78:51:CB:B2:ED:59:C1:CF:5F:24:A4:D4:D4:8B:52:CC:76:F0
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 01987F7A2E6E1222B2BD534F795A5D3F3487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 13:02:50 +0000
Manifest this update: Wed 06 Aug 2025 13:02:50 +0000
Manifest next update: Thu 07 Aug 2025 13:02:50 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: NGLGbbeae2JHNCdZdr+1dHMZ5uYswFtWEnMjJgGbzFk=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:2e:6e:12:22:b2:bd:53:4f:79:5a:5d:3f:34:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Aug 6 13:02:50 2025 GMT
Not After : Aug 7 13:02:50 2025 GMT
Subject: CN=4c677851cbb2ed59c1cf5f24a4d4d48b52cc76f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:63:2d:45:68:4c:3d:6f:69:e6:fb:41:d2:
ef:8d:7f:be:d4:d4:11:07:97:ae:39:e0:fd:6d:9d:
ed:8b:eb:ed:4e:f3:3a:b2:70:5e:36:62:fb:be:db:
a6:92:f3:8d:9a:24:18:ef:6c:99:5d:96:31:74:e0:
1e:67:fe:d3:40:3c:78:30:49:2c:c9:fc:26:75:be:
23:e6:f4:1c:1f:f7:00:9b:d7:d1:67:56:f7:92:f8:
09:3b:3c:9a:7c:57:76:58:07:1b:0c:6d:82:4e:ca:
51:dd:5f:8b:30:51:3a:a9:72:6d:58:e8:1d:52:c7:
32:a1:db:16:aa:9a:40:9b:cc:8e:d3:21:ed:27:46:
f5:37:1d:f8:77:a5:4c:9c:16:81:cb:ce:aa:ef:65:
75:f8:c3:6e:85:2d:a5:00:5a:a1:3f:a6:68:de:53:
1f:60:87:94:c6:e8:46:d9:61:a7:d1:3b:b8:e5:4a:
7b:3b:d8:2f:40:ca:34:39:4b:8b:d2:1f:1c:ac:a9:
ed:ec:d1:e6:49:86:5e:4f:90:6b:6c:f9:c6:f0:79:
65:fd:36:f7:c7:21:7f:9b:3c:8e:d8:e3:1c:24:50:
13:bc:80:f7:b9:09:17:62:0d:09:34:c7:8f:d9:ee:
34:01:47:38:33:39:de:f7:81:2d:5c:a0:76:96:64:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:67:78:51:CB:B2:ED:59:C1:CF:5F:24:A4:D4:D4:8B:52:CC:76:F0
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:30:26:c7:b4:24:16:c2:6a:2f:df:d2:db:a8:33:04:93:c9:
f1:38:a9:8a:a6:31:6e:dd:b9:ce:d0:d7:03:34:f2:27:8a:b3:
86:32:6b:a9:15:f1:c3:f9:b1:af:89:a8:f6:24:7b:19:b9:0b:
e2:75:9e:90:c8:eb:af:b1:8b:4c:56:48:a4:87:24:45:1f:85:
81:b0:d5:a0:2f:e2:c2:7c:7d:4d:ac:9a:85:e9:c3:a9:17:e0:
86:10:5d:0d:e8:40:d1:5a:51:ae:38:29:01:43:50:91:d4:dd:
0e:d6:08:1d:ac:f7:8e:1d:0d:c8:89:a3:f3:8f:5d:40:9e:1d:
5a:47:fe:ec:0c:7d:d0:8a:c5:ab:6f:76:42:5b:e9:25:b0:d2:
8e:61:06:c7:1b:0b:d8:75:30:fc:9f:7d:cb:c3:44:f4:fd:89:
e0:ed:bc:ca:56:d6:49:7f:83:1c:7c:32:8b:cb:3a:f8:84:4f:
41:34:09:86:21:57:39:8a:45:e4:ed:8a:63:b9:bf:9e:54:ff:
ad:8b:1f:b6:8e:3d:9b:34:3e:0b:a0:e9:9c:f2:87:fc:2f:8f:
bd:50:ef:02:a2:31:46:f6:fd:2d:f3:df:58:41:8f:1b:ff:6b:
b4:a2:26:a5:69:c5:63:ae:51:6f:34:84:ea:21:2a:f1:ad:5f:
89:ed:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:06 2025 by rpki-client