Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: +Tmj8BVx9PPo8i7EPH+fGoO8eHs6r3IyxcxE1FjWc0A=
Subject key identifier: 2A:48:E1:AA:6C:1D:65:17:6D:8B:03:57:68:A6:AA:56:1A:09:7A:B0
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 01988B7D21BF4792C1B34CF9DE21F91DBF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0F8F
Signing time: Fri 08 Aug 2025 21:01:30 +0000
Manifest this update: Fri 08 Aug 2025 21:01:30 +0000
Manifest next update: Sat 09 Aug 2025 21:01:30 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: FtZ2VI5VikxyhrO/gkkLEvE4VhrZroG30ozBT6RAf0E=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:21:bf:47:92:c1:b3:4c:f9:de:21:f9:1d:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Aug 8 21:01:30 2025 GMT
Not After : Aug 9 21:01:30 2025 GMT
Subject: CN=2a48e1aa6c1d65176d8b035768a6aa561a097ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:83:b8:26:12:a8:88:b3:f4:6a:fc:23:e5:
c6:2f:dc:8f:cc:f8:54:1d:49:f2:f2:22:c7:4f:29:
23:78:43:7a:2c:a6:08:e6:f8:b8:80:15:6b:24:67:
72:58:c2:35:93:b7:ea:2f:aa:11:90:d7:7d:b8:be:
df:a8:1b:ae:93:e8:a5:f4:2a:68:47:21:5b:e7:ab:
84:a7:88:e0:d6:b7:61:0c:ef:90:a3:72:eb:6e:b8:
e8:d1:66:7c:07:15:fa:95:e9:46:3f:ce:18:7e:f0:
27:41:d5:bb:de:28:9c:77:70:13:66:ac:2b:fe:8b:
51:16:9c:2d:1c:41:ca:8a:b9:af:48:92:ae:7c:f6:
a6:27:ae:37:7c:dc:70:cb:60:09:bc:d5:5a:0c:03:
81:18:e6:5a:a5:98:3a:d7:48:91:5c:29:e4:bf:ac:
31:a5:4a:62:91:67:c0:b2:3e:d3:b8:ac:91:42:85:
50:11:47:0b:73:d5:ee:47:b0:bb:56:2d:5c:d3:7b:
12:78:47:a8:5c:48:07:e1:f2:9d:5f:32:12:d1:f8:
19:c7:b4:4d:f3:36:15:f1:5b:c2:63:97:41:b7:76:
e3:9b:f7:9e:93:b0:55:bc:4a:b1:98:0d:ae:6f:0b:
c3:0a:89:0c:50:44:68:f3:29:f0:fb:88:b7:d7:8f:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:E1:AA:6C:1D:65:17:6D:8B:03:57:68:A6:AA:56:1A:09:7A:B0
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:b0:38:5c:b6:45:27:63:e3:9a:a6:04:c8:31:71:20:f1:
9e:51:da:7b:45:a0:ce:46:e0:29:ad:ba:be:46:8a:45:14:21:
13:fa:1e:54:86:0c:a8:cb:13:18:5b:c7:d4:df:44:25:59:62:
62:99:d8:2f:c2:cf:97:d4:dc:20:ee:93:da:6e:99:0c:d6:eb:
da:89:0f:0b:01:5e:25:83:f2:70:a9:cc:5e:74:18:34:9a:77:
4b:70:f5:10:d0:bd:76:8c:8a:b9:16:eb:9b:f2:ec:39:f5:da:
75:44:a0:8b:76:c5:36:86:56:14:ab:7c:46:48:5b:e2:52:4a:
31:fa:20:32:5c:e1:27:62:fd:e3:fb:64:45:ad:5e:70:40:97:
78:62:12:a4:1a:83:4b:9f:f4:ae:3c:a7:a7:47:57:65:84:f0:
36:78:06:2c:3f:a5:9d:fc:cb:72:b3:7b:32:b9:c1:c9:51:9e:
f8:a8:f6:f0:fa:83:f0:12:18:8a:e2:56:00:7f:2d:c2:67:49:
a1:80:41:81:48:06:e1:9f:a1:a2:73:37:b1:66:f3:47:06:52:
7a:9e:af:ac:1a:e6:ea:35:20:92:ee:26:39:59:c3:1d:92:da:
ed:80:4d:03:02:71:7e:07:54:f1:f8:59:37:7d:1d:62:53:27:
75:b3:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:35 2025 by rpki-client