Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: 6OExH319kV+n0MqR/Y1hvTKpuHgrOTnZtcX++DmUMNQ=
Subject key identifier: 21:F9:D3:6B:A8:D8:39:EF:FD:BC:A1:68:DB:FE:1D:1E:35:06:19:A3
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 0198D58380AB70C24D5F3D512CA0FF179EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1254
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: 4qyAJwUITSPaeQHe1popn98iNdrAxxl0X8OO69oRTHs=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:80:ab:70:c2:4d:5f:3d:51:2c:a0:ff:17:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=21f9d36ba8d839effdbca168dbfe1d1e350619a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:43:11:be:11:a6:63:aa:e9:7a:7a:d2:5f:
2f:a5:60:ac:bc:60:53:11:da:14:60:39:b0:7d:96:
97:57:82:9c:a1:b6:47:f1:b2:fe:de:1b:ba:df:bf:
ee:b6:a4:09:02:0b:37:87:ff:fd:1d:ff:ed:c6:2e:
c5:f5:fe:fb:c3:36:b8:df:38:07:7d:0a:b2:62:a2:
5d:05:4d:d4:85:41:13:8f:47:fa:67:5a:f1:78:29:
e1:32:1e:49:d8:4f:2f:82:e5:96:cf:19:8c:9e:cf:
2d:2b:4e:54:94:ff:2e:7b:0b:6b:74:b4:1d:94:3d:
c3:33:d3:b5:85:9f:86:4c:7b:d1:81:0e:ae:91:fd:
83:20:d4:dd:41:50:3c:d5:bc:68:0c:64:b8:5d:a7:
e3:59:94:d6:6f:9c:27:ca:20:b0:01:49:4f:dd:30:
04:e1:e5:62:b1:36:50:cb:c3:f3:31:ab:81:ae:35:
d1:9b:a9:c7:0c:68:02:aa:b0:0f:bc:5e:ac:f2:d9:
4b:9c:86:23:3e:b1:e6:37:a9:d5:dc:7d:40:22:5a:
26:6a:fa:48:f1:f6:70:0e:d6:04:f6:a4:c1:4f:9a:
f2:84:d2:a8:a4:4d:c3:38:d6:e5:52:d2:49:4d:f2:
19:27:8f:6a:d7:c9:7d:14:6e:1a:7f:bf:96:2d:d0:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:D3:6B:A8:D8:39:EF:FD:BC:A1:68:DB:FE:1D:1E:35:06:19:A3
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:39:72:b4:62:7f:a3:49:58:ad:06:ab:7b:7f:ae:bc:94:30:
f9:79:5c:67:a7:05:7d:4b:46:c5:a6:a2:f7:9b:1e:df:49:55:
df:23:36:22:63:ae:85:3d:94:54:03:a8:df:71:94:ba:1c:88:
29:18:4a:f6:2e:4e:96:7f:64:f5:c7:b2:e9:24:48:6d:dc:0e:
d5:f0:f6:35:e4:35:cf:9c:21:1f:34:09:32:a4:67:fa:fc:aa:
43:66:09:ee:1a:35:13:5b:86:89:e6:86:a7:8b:82:46:d6:3f:
da:57:b5:e6:67:76:92:f4:ef:28:41:2c:54:c3:09:cc:b6:de:
e2:2c:a6:c0:05:47:64:89:1a:62:61:8b:9a:31:cb:2c:eb:6a:
fe:e6:59:26:31:05:60:b8:4e:51:57:bb:72:97:af:77:03:65:
1c:3f:ef:cd:c1:83:59:e5:dd:ab:46:fc:7e:b3:0d:5b:6a:b2:
6e:68:45:08:bf:c5:39:c2:c1:c7:03:24:72:4c:b3:7e:08:a9:
03:e4:35:fd:49:c2:6c:00:2c:c0:9e:4d:24:d1:3a:3e:de:c6:
31:a5:ac:7c:21:b5:b9:16:0b:dd:13:e6:e0:4d:c5:ea:6d:34:
05:26:1c:97:46:26:d1:62:49:da:38:21:9d:96:02:1f:1b:43:
b8:84:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:59:29 2025 by rpki-client