Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: bjrv01MMfpswwp7rnZ9BZL6C9WSZcV7FrMwEBTUi3DA=
Subject key identifier: C5:0F:AA:6E:31:2F:19:2C:CC:D6:11:29:E8:4B:B6:B9:CF:36:53:19
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 019874F4AD9C70F12EFA88D63F4CB81F61AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0A01
Signing time: Mon 04 Aug 2025 12:00:48 +0000
Manifest this update: Mon 04 Aug 2025 12:00:48 +0000
Manifest next update: Tue 05 Aug 2025 12:00:48 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: ppGBqd8xkdAcZyVofxbFhMathxHanANuhCZYRIkXjCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:ad:9c:70:f1:2e:fa:88:d6:3f:4c:b8:1f:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Aug 4 12:00:48 2025 GMT
Not After : Aug 5 12:00:48 2025 GMT
Subject: CN=c50faa6e312f192cccd61129e84bb6b9cf365319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:f0:19:b0:c2:ef:9d:96:33:db:12:67:67:
3e:ed:6f:06:bb:14:8d:e2:6b:94:98:6d:85:55:cc:
94:0b:19:dc:92:81:cf:44:2f:9a:22:bc:2c:55:8a:
43:de:e1:d9:88:70:6a:c9:4b:3a:ba:c0:7b:28:f8:
33:50:18:39:30:af:c1:87:b3:39:34:07:42:e9:3a:
04:60:95:bb:d4:77:7d:ad:f0:75:96:8f:e7:f3:2e:
6e:aa:3a:02:37:03:c0:47:81:6c:82:b1:80:dc:ae:
29:cb:c5:89:19:44:a1:e5:d5:67:cc:a0:81:93:60:
27:aa:0a:2c:22:93:c3:87:0a:73:6b:70:9a:d4:82:
03:aa:9b:05:5f:5e:c9:d3:ac:d9:99:0c:40:15:0d:
8b:a2:41:68:ef:35:43:3e:59:fc:ed:dd:f0:c9:38:
12:1d:d4:b3:de:22:44:79:88:8c:4d:80:e6:34:85:
c5:17:57:2e:3f:c0:ba:fb:a6:1a:f2:ca:de:b6:14:
72:48:db:00:c8:e9:0a:5a:44:b1:05:58:ad:72:4c:
68:47:66:63:c5:76:a8:72:82:1e:98:35:17:ae:f4:
fb:14:34:3c:fc:24:10:73:bf:1a:1b:3e:36:68:ee:
49:2d:15:37:c8:24:fe:08:63:ac:59:86:f5:b1:f8:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0F:AA:6E:31:2F:19:2C:CC:D6:11:29:E8:4B:B6:B9:CF:36:53:19
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:a7:08:cc:dc:84:fc:f1:be:34:8b:89:c9:51:29:78:3a:
fd:79:9b:1b:04:e7:79:68:cd:6f:6f:f7:63:a2:11:75:11:fa:
20:25:35:ea:78:7c:08:f0:bb:c8:29:75:04:c4:f4:55:49:21:
98:cd:20:c0:40:1b:4c:87:8c:ed:c4:db:00:09:75:45:60:df:
db:6c:be:df:08:db:e0:f4:c8:6c:7f:b9:1a:f4:54:4b:2c:db:
ad:9f:d0:22:b0:20:2a:0e:11:1f:1e:da:21:2e:29:17:b9:cc:
41:8a:79:74:67:62:99:88:bf:2a:72:f5:59:9c:37:b5:0e:af:
60:87:68:6a:b1:8c:43:6e:8c:38:80:e8:e3:b8:db:dd:aa:25:
89:b1:db:c1:d6:a5:23:96:09:32:d4:21:b9:38:5e:84:c7:ad:
0d:10:86:d5:2c:0f:ef:fb:77:3d:92:b1:67:40:b4:da:03:1a:
4f:ac:54:bd:be:dd:e0:3f:3c:6d:12:9d:2a:94:d0:84:9b:6e:
d3:f6:80:92:d0:fd:83:ce:95:1d:64:3e:d2:f9:d7:0f:99:c3:
97:1b:a2:b6:b6:b4:90:93:62:3c:ed:10:ed:a2:07:af:21:a9:
80:52:e1:21:0f:c4:71:55:ee:cf:13:e5:26:3f:b6:1f:e2:0b:
c9:d0:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:22 2025 by rpki-client