Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: Ib9QkhLFtEMJKDgXyecv3pJSl10ji8ZBPY3Iv4quCdY=
Subject key identifier: 1C:11:A5:49:92:D7:AB:4F:AA:20:B2:26:3B:80:90:6A:4A:32:7B:54
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019894EE0CC844AE61D37DEA3C89EB217DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0C5D
Signing time: Sun 10 Aug 2025 17:01:25 +0000
Manifest this update: Sun 10 Aug 2025 17:01:25 +0000
Manifest next update: Mon 11 Aug 2025 17:01:25 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: vOrIRNDWwApde9q7tn69stDRzUBDtu65/b61fEeP9SU=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ee:0c:c8:44:ae:61:d3:7d:ea:3c:89:eb:21:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Aug 10 17:01:25 2025 GMT
Not After : Aug 11 17:01:25 2025 GMT
Subject: CN=1c11a54992d7ab4faa20b2263b80906a4a327b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:2b:0a:9f:c7:d5:84:de:db:d0:fb:4c:d3:
0d:9a:0e:75:94:18:89:fc:93:ae:40:d7:c4:89:d5:
14:44:f0:f8:69:84:bd:fa:ac:d9:64:94:19:76:f4:
43:cc:81:a1:1f:3c:e9:f4:d5:c9:de:14:22:21:fd:
fc:d0:72:98:52:ba:d6:fc:86:04:32:8a:50:66:5c:
47:d1:ad:26:e2:14:86:fd:1a:ef:34:8d:26:7e:aa:
67:a5:35:a4:63:a6:9d:a0:cd:0e:0a:c4:9c:ef:04:
a5:0a:2e:96:1b:e1:f2:d0:a1:5d:fe:a7:b5:4c:b9:
8e:ea:83:9e:05:25:71:ca:42:45:34:aa:31:b4:72:
be:b9:f6:55:d6:e9:98:c5:b4:7f:b2:bc:dd:5c:6a:
44:c4:b6:da:0f:14:18:2a:9f:48:f1:e5:ad:e4:c1:
15:f6:be:b8:26:f6:d9:ac:d0:31:6d:90:d9:03:2c:
53:5d:b2:02:24:da:0d:d8:90:ae:36:cf:3f:22:57:
65:05:20:70:2f:29:fe:ef:0b:23:90:ea:34:25:3f:
87:3e:17:41:ee:f8:e0:f0:b7:f7:2e:1b:46:69:ee:
fc:2c:16:5a:af:f1:cb:1c:3d:5d:f8:56:b2:e9:52:
5f:56:3f:f1:78:e7:d1:7d:5c:4e:60:9e:2b:10:7c:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:A5:49:92:D7:AB:4F:AA:20:B2:26:3B:80:90:6A:4A:32:7B:54
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:01:ff:c9:c9:b1:57:c4:8e:31:9e:24:3d:66:cb:8b:ac:
7f:35:18:1d:c1:9f:74:fe:f7:79:32:94:85:04:9c:38:d5:78:
47:80:4f:48:1b:e0:9e:63:5f:a2:b1:e7:8a:25:9b:5d:24:50:
f2:3c:71:24:80:22:92:8f:1c:d1:10:ae:31:ce:04:33:0f:31:
42:81:5b:c1:6f:7c:f6:b0:95:2e:6e:5f:70:e4:0b:bf:8f:6f:
c6:03:95:47:6a:e3:e6:be:e4:68:bf:65:bb:59:26:cd:9c:26:
42:d5:ee:0f:54:da:54:1f:74:1c:2b:c3:6f:a3:99:c3:24:21:
a8:65:51:14:f3:2a:fe:c0:57:dd:64:7d:f2:ac:4e:96:e7:52:
df:f3:76:c9:4d:c5:12:0b:d1:ca:a9:ca:38:11:b0:68:f8:1c:
86:a8:78:f6:38:b6:bd:03:8f:60:59:e6:eb:07:32:65:16:2d:
b7:d5:1e:9d:64:c4:03:41:ff:d8:17:c2:8f:97:0b:60:b0:f2:
98:ea:9d:49:01:1f:79:f5:73:c9:02:70:4d:17:29:30:c8:7a:
29:70:3a:9e:87:d9:8f:ac:62:36:79:9d:81:97:d0:8f:60:40:
32:e9:1e:3e:b9:3e:19:26:2c:0c:82:ca:43:57:40:72:02:97:
b5:85:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:28 2025 by rpki-client