Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: 2NrlhF+4CgHK5DtkHpCvxvf/UcSNi29G2CrtJjXqimk=
Subject key identifier: E8:74:2E:FD:3F:B6:51:68:9B:78:67:78:80:C0:75:D9:84:6E:CB:FC
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 01976D3E69582B4F2610FF01E81A0E14E087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 0B
Signing time: Sat 14 Jun 2025 07:01:36 +0000
Manifest this update: Sat 14 Jun 2025 07:01:36 +0000
Manifest next update: Sun 15 Jun 2025 07:01:36 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: eJKgO7ofdnZU14qWISTIM2EG9pCxbZO+V9KUi5lI/yA=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:69:58:2b:4f:26:10:ff:01:e8:1a:0e:14:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Jun 14 07:01:36 2025 GMT
Not After : Jun 15 07:01:36 2025 GMT
Subject: CN=e8742efd3fb651689b78677880c075d9846ecbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:02:fa:39:11:9a:cf:8a:58:73:40:63:12:
6f:d7:a3:c9:82:c4:67:d3:65:b6:d9:ec:da:8b:f6:
c4:a3:80:5b:2a:d1:cb:90:16:05:60:62:2a:5a:a5:
26:1e:ac:43:91:d6:1a:08:2c:34:46:f6:04:47:a2:
13:b2:4c:71:8d:63:2c:69:99:8a:b2:a0:78:77:0e:
4a:c7:72:a7:10:d2:2e:c3:60:f7:51:15:f9:e6:96:
a6:3c:e1:ed:f9:f6:58:82:aa:13:a0:61:2f:c3:9b:
2b:2b:33:91:7f:a9:6b:48:62:ee:73:fc:93:dd:7c:
c4:b7:23:b2:9b:bf:fe:be:39:ca:e6:50:2b:84:24:
34:c1:6b:be:f8:b2:b6:7e:31:57:b4:a6:52:62:b6:
c8:41:01:b5:0b:1a:03:a9:dd:cb:22:d5:6e:c1:b7:
32:00:9f:e3:56:18:c0:1a:e0:c2:d1:32:34:b8:59:
1d:28:f9:fd:05:69:20:e8:be:01:4c:86:8b:a5:24:
45:5c:1b:54:7f:b6:2a:88:25:6d:81:b0:16:4b:90:
7e:0c:c9:03:7b:e2:66:71:13:46:04:77:9e:a9:34:
a0:98:bc:c4:16:2e:3e:c2:36:ae:32:c6:f2:e8:e3:
a5:0e:71:67:d4:21:44:6f:62:ff:c4:4c:0c:76:62:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:2E:FD:3F:B6:51:68:9B:78:67:78:80:C0:75:D9:84:6E:CB:FC
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:fc:e2:97:8a:2d:d1:f3:79:99:ee:21:d3:6d:7f:f7:bc:
01:93:a9:7d:1f:68:0a:7e:67:83:6c:39:08:9e:01:05:58:13:
5c:c2:79:e4:58:8f:b5:7b:b6:f4:d7:7d:d7:ed:f0:e8:09:3d:
ff:eb:6e:1a:44:ea:0b:da:00:2d:35:6f:bf:65:16:0a:8b:21:
2b:ed:3d:04:c1:16:f2:72:92:57:25:b6:61:5f:6e:56:4c:9f:
b3:d4:9b:35:37:df:39:ff:f2:6d:71:0e:5c:e3:68:7d:ab:dd:
f4:8c:99:d3:48:41:98:49:3c:5d:97:b2:fd:f8:09:23:33:4f:
2d:8e:33:ea:25:d4:b9:c7:e2:2e:a4:9d:a1:d1:02:e7:3d:6b:
31:65:d5:f3:b1:66:56:82:ed:e7:f3:3c:92:9d:a0:43:b5:85:
1b:b3:f3:07:ad:18:56:50:a9:4d:a6:70:8f:7d:7d:b6:b0:fb:
7b:62:03:f2:13:f0:2e:f3:1d:d6:bc:93:4a:f9:73:2b:5c:0f:
e8:c3:fa:55:bc:6f:09:e8:75:4b:03:0b:5f:85:92:b4:00:c8:
5d:e5:b6:5f:3d:84:a1:de:4b:2f:8f:d5:12:6d:1b:61:a9:39:
d2:71:86:64:f7:49:44:4c:e8:b0:a4:9d:00:d5:7f:e1:3c:e4:
30:5d:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:47 2025 by rpki-client