Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: 6/j7GW9tQUrzGzoTK8udSMZwlQCaMNim2UwUXb0bWtE=
Subject key identifier: A9:0D:AC:E0:29:A8:DA:B1:34:4A:44:33:DD:8A:C1:C7:4E:DD:BF:05
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01989448FB4D163BF4282BD7DF0558194678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 08BB
Signing time: Sun 10 Aug 2025 14:01:07 +0000
Manifest this update: Sun 10 Aug 2025 14:01:07 +0000
Manifest next update: Mon 11 Aug 2025 14:01:07 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: rc3wHFk+FGuqmiDP78539o92PufPKKDVSFAVIBDqbb4=)
2: cNLYAjPMpLbcGOrpCslyUiLMP34.roa (hash: JmHm3+B47TlFvMWFE2W9uNvIfC/wvizwOPaVYVDTxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:fb:4d:16:3b:f4:28:2b:d7:df:05:58:19:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Aug 10 14:01:07 2025 GMT
Not After : Aug 11 14:01:07 2025 GMT
Subject: CN=a90dace029a8dab1344a4433dd8ac1c74eddbf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:85:61:96:e7:27:2b:35:0e:b6:08:41:62:
02:fb:67:bd:91:ea:35:04:26:ab:ee:52:47:9e:1a:
f3:e6:be:cd:15:a9:e3:91:63:3c:7f:00:c3:5b:de:
ab:31:1c:6a:06:90:32:d1:ba:d3:07:ac:9b:53:e7:
75:9d:ec:49:af:49:f6:d4:8d:c3:7e:eb:20:81:81:
57:d9:f4:15:0d:de:91:04:39:1a:4d:c9:91:7b:13:
de:28:86:ab:f9:2c:db:ba:ed:02:19:00:3a:fb:ee:
6c:e0:2b:02:18:45:1a:fe:15:f3:9b:62:3f:7e:80:
a8:63:71:27:6d:b9:c5:24:30:5a:f1:fa:1d:d9:8d:
b0:b2:f5:4f:97:d0:95:41:47:45:6c:82:e8:b2:c2:
82:68:f1:f2:61:49:f6:57:3b:07:89:83:4b:1b:c4:
22:ef:a2:1a:70:3c:c2:cf:b5:f7:2f:c6:7c:98:41:
65:a4:0a:94:bc:6d:14:1a:0e:55:e8:51:11:1b:9f:
4e:39:da:3a:57:dd:a0:ad:7b:28:c4:d5:26:7e:76:
37:17:b5:6c:13:2d:05:55:61:89:b3:c5:58:8a:53:
ff:d4:f6:fa:14:34:e6:ca:4f:1e:fe:ce:11:a4:52:
e7:0f:9f:26:22:49:ef:a2:01:46:64:01:03:f4:ed:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:AC:E0:29:A8:DA:B1:34:4A:44:33:DD:8A:C1:C7:4E:DD:BF:05
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:0b:21:29:86:27:f6:1c:67:9a:15:a7:ff:d0:0a:37:13:
75:93:6e:81:5f:01:08:f7:18:72:ac:a5:d2:63:fe:6d:c9:aa:
ad:e8:89:c4:4a:76:49:3d:7d:23:93:42:b2:e1:36:91:9c:33:
f5:05:dc:3d:23:95:04:a1:8e:bc:31:82:49:cd:00:ba:5b:dd:
4f:2e:0a:ae:94:c7:bf:e1:9e:39:a8:a5:45:7c:b3:83:dc:82:
b2:19:42:a9:df:89:31:88:03:47:ae:22:6b:f7:0c:52:8f:27:
4b:1d:cc:c6:88:29:98:0b:54:42:cd:0e:32:e4:46:68:26:11:
44:71:bb:d9:2b:41:08:15:d3:84:cf:6d:9c:84:6d:4e:9b:1e:
8d:69:ab:62:1d:f8:a1:62:83:9a:c2:2f:87:dd:d7:9b:fd:b6:
2b:c3:5c:6b:33:52:04:9e:c7:f6:c3:4c:e9:71:4e:67:f7:af:
51:ba:b2:e1:12:c0:8d:7e:9c:8f:82:c6:9b:71:16:ad:f5:e7:
9f:de:89:0e:87:28:e6:96:98:31:c9:e4:ad:e8:9a:07:61:70:
cd:7d:d1:51:68:bb:ef:e6:b8:0e:18:9c:89:ed:83:1d:a9:0b:
df:d0:fe:6b:d9:0a:8d:e6:ea:4a:bf:13:f5:a0:61:e2:d1:2e:
3f:4b:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:26:15 2025 by rpki-client