Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: 00vFMhym6migLUuNxZtGKx8nSG8WV13G3xWv4/N2AY8=
Subject key identifier: 9E:9C:AB:08:22:EA:45:C2:E8:C6:0D:C6:E7:FE:D9:B7:7D:9F:31:B2
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 0198A04D63DDBFCDDACAA018DD088E51EF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: AA
Signing time: Tue 12 Aug 2025 22:01:22 +0000
Manifest this update: Tue 12 Aug 2025 22:01:22 +0000
Manifest next update: Wed 13 Aug 2025 22:01:22 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: 4xyRjAxhwfuK+A60aXwEEXM0c5TYhwkFKcxAiAWPCM0=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:63:dd:bf:cd:da:ca:a0:18:dd:08:8e:51:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Aug 12 22:01:22 2025 GMT
Not After : Aug 13 22:01:22 2025 GMT
Subject: CN=9e9cab0822ea45c2e8c60dc6e7fed9b77d9f31b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:5f:0a:77:27:a2:86:76:31:0c:4d:ec:01:
8b:97:6d:50:e1:0d:3f:f3:3e:bd:f2:61:be:32:e7:
5a:54:49:62:ce:a7:cb:f9:45:75:9a:3d:5e:70:c2:
97:db:37:e9:c9:68:9e:18:21:de:9a:ed:95:bc:7a:
36:9a:6b:02:bc:54:b0:35:9d:82:e5:b0:81:bf:9a:
3f:de:bd:61:19:a3:a4:af:eb:9e:d1:28:7e:5f:41:
d7:e7:de:ad:31:9a:b9:cf:28:17:47:65:41:4d:5e:
27:5b:08:0a:ea:0e:71:6d:74:64:10:dc:5a:c3:4e:
56:b4:7b:20:ae:ec:76:ab:d5:72:a2:93:d2:17:1b:
ab:6b:eb:d9:6f:47:1c:60:e5:c3:59:91:eb:40:8d:
fd:46:e8:9f:8a:43:3d:ae:c7:ff:01:10:02:9e:3e:
e3:84:44:3e:54:4d:83:07:f1:88:6c:a9:55:e5:ba:
94:57:d7:1b:c6:80:91:c3:76:e7:7d:c9:85:5d:d5:
f7:fc:d1:f3:dd:83:c4:39:a9:27:57:49:17:58:ba:
05:e6:1d:ec:ca:b5:35:7d:a2:15:90:7f:26:20:67:
de:80:4b:21:59:cc:c3:4e:6f:20:16:a7:6f:ea:d8:
77:31:85:80:1e:4f:67:89:1f:cf:41:19:cb:ec:f8:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:AB:08:22:EA:45:C2:E8:C6:0D:C6:E7:FE:D9:B7:7D:9F:31:B2
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:93:18:c1:d4:50:8d:fd:29:99:9a:ed:58:f3:0a:fd:14:96:
a2:9b:78:ce:7d:c4:59:84:d3:42:23:ee:bd:5a:f8:d9:fd:09:
45:66:af:94:11:98:cd:dc:50:db:9c:bb:d5:11:15:c7:8a:ce:
47:20:a6:b5:f7:6a:b8:f1:36:e5:5c:61:11:0a:45:25:a1:0d:
dc:1d:94:17:9a:27:24:e2:42:c7:d3:21:42:55:81:52:8d:5d:
43:6f:46:e4:26:7f:dd:16:82:41:7e:93:3c:f9:2a:7b:2b:74:
6f:68:20:fa:6b:da:23:eb:64:45:0b:fa:d6:da:e9:39:26:50:
8c:ca:fb:72:e4:34:68:5a:87:cc:f0:0e:b4:0d:03:a4:29:44:
c6:b4:35:36:13:77:41:cf:c5:83:bb:49:0c:f8:79:fb:8b:3f:
b7:de:35:c9:24:e2:b8:27:aa:49:58:91:14:86:53:a5:82:b9:
86:02:07:2c:cf:91:97:7f:9f:8d:f7:2b:ac:75:65:17:03:92:
bc:b9:a5:0a:1a:b1:04:3f:f0:44:91:6e:94:54:99:01:e6:4f:
19:2d:e7:fa:59:03:e4:d4:00:59:df:29:a8:fa:23:66:a2:a6:
76:e4:f4:c6:02:2a:44:3f:d3:b6:59:84:9c:32:c3:53:e6:14:
a6:1c:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:27 2025 by rpki-client