Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: e2edBCISf1uU3VCqDkMRsUB7bY1hvff6mRvnE6Po+yA=
Subject key identifier: 71:02:A2:50:B7:09:D4:D4:D4:15:55:AE:D8:BE:4B:D7:59:04:6A:3A
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019A4E863CFC3D5136BA251493CA3D2CAB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0C80
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: CDYKwYM+RM21TgmAFyPQemlAfQPHoM+UKeXfwQua4Ck=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3c:fc:3d:51:36:ba:25:14:93:ca:3d:2c:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=7102a250b709d4d4d41555aed8be4bd759046a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:ec:35:5a:8a:0d:65:64:a1:b2:54:d3:75:
8a:9f:ef:fa:e0:83:a7:5e:b8:3a:1f:2f:7b:6b:00:
cd:28:c9:1a:a0:df:81:63:08:61:0d:87:ca:f5:20:
81:ad:d3:08:9b:0c:a4:37:ec:8c:b4:5b:80:b2:13:
98:17:f2:99:7c:7e:a9:5d:38:07:65:f0:20:99:52:
43:53:b4:b1:ca:98:7f:de:2c:26:9e:cd:08:b0:52:
bb:24:2f:dc:52:6b:3b:22:06:91:58:f6:c5:17:62:
a6:54:a4:50:b9:ea:42:fc:d9:4b:51:4b:1f:06:64:
b4:cb:9a:b9:d7:d1:a9:a6:23:7d:25:83:3e:86:54:
f8:3d:9d:c0:37:0d:b0:e8:4d:1c:3c:f8:24:e0:22:
a9:69:ff:83:d8:78:58:ad:79:2b:21:2b:60:d0:70:
50:a5:6e:e8:a3:01:e8:f9:75:53:10:e2:61:2f:ae:
c2:f4:e1:8c:38:97:b5:5d:52:37:4f:93:f6:4f:e6:
93:47:44:d4:cc:65:e1:b4:41:ae:b7:cb:9b:54:84:
fa:6b:5c:b4:0c:0b:ec:12:da:d1:94:ed:37:1b:ae:
fd:b6:e4:2d:c6:c9:33:9e:a2:30:ee:57:38:67:e6:
11:5d:a4:00:e4:2d:0c:14:3c:de:9f:5c:45:b5:46:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:02:A2:50:B7:09:D4:D4:D4:15:55:AE:D8:BE:4B:D7:59:04:6A:3A
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:06:be:1c:5e:87:cf:f4:05:03:b1:8c:1d:6d:29:d2:88:6b:
12:c2:39:67:a0:8b:ca:0c:96:11:4e:96:79:81:aa:6d:69:fe:
d6:db:e9:e3:41:f6:49:86:9c:07:82:a9:27:81:51:2a:5d:7a:
e2:fd:a7:c2:82:a0:f9:d1:e0:c2:86:a0:6d:08:fa:27:9b:7f:
fe:4d:18:27:1d:b4:f4:cd:71:03:f6:9a:bb:0d:76:ad:ad:3e:
95:99:0d:9a:2a:22:91:46:c5:aa:43:f7:d3:50:8f:b7:31:b3:
5d:9b:94:c2:94:40:8c:61:43:ce:fc:2b:3e:59:ae:85:31:c3:
57:a4:08:92:af:ea:d7:90:0a:e8:24:f0:c1:ee:ac:54:77:c4:
06:2a:11:0c:49:6c:3e:1a:46:79:17:26:a5:dd:08:59:f7:dc:
e2:54:c8:69:19:6b:0e:6d:0c:ad:e3:32:fd:2a:ac:39:fa:ea:
16:13:69:f5:f6:a2:88:e9:22:b1:3b:c8:0c:29:fa:ec:c0:74:
cf:6f:7c:90:26:bc:14:5e:ea:3e:f3:be:e2:7b:1f:24:39:5b:
2b:82:8a:6c:c6:66:40:78:92:7b:57:06:5c:a4:f2:35:7e:55:
d5:57:93:76:27:be:f1:1d:93:c3:3a:18:60:8a:d9:e5:d2:f7:
6d:a5:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:59 2025 by rpki-client