Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: Y1oGSsDwF+SdIU4i83ivAaeHf6UqJmn897A83ziyGdQ=
Subject key identifier: A6:2B:21:6F:5E:A2:24:EE:85:AC:BD:AE:2A:81:18:4A:B9:E7:2E:F8
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 0197B7EAB25E699768DC5F5FFDA6EAD8C9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: ctxkV34rZ7Xr38xwncoc8d3evlGpbpROGxXT0HMRV8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b2:5e:69:97:68:dc:5f:5f:fd:a6:ea:d8:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=a62b216f5ea224ee85acbdae2a81184ab9e72ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:36:8a:a1:ff:da:0d:f3:66:82:45:d6:98:
8b:8c:40:7a:b0:7d:56:9a:0b:ff:ed:e8:48:60:90:
99:55:19:10:cc:08:7c:86:c1:0f:87:70:c6:54:86:
b9:26:3a:5a:20:d4:54:09:18:60:80:9d:4a:33:0b:
9b:46:68:a5:2a:11:a4:de:20:4c:a6:c8:b9:c4:20:
d0:4d:07:e3:87:f9:52:c7:b7:52:3d:41:71:bd:55:
75:81:65:5d:f5:65:95:46:e4:b3:3d:26:24:e0:e4:
8e:d5:76:a5:b3:dd:66:eb:bc:2b:fc:47:30:92:5a:
69:4b:65:c5:fe:4f:80:37:88:05:32:f8:83:de:3c:
4f:68:86:b9:36:c1:f5:18:ab:cb:ae:21:52:82:2a:
20:0c:be:20:6d:53:5f:2b:04:c5:c6:e0:59:f6:4f:
d5:50:1f:e3:95:b9:bc:10:73:b2:bf:22:6c:bd:e6:
45:e9:40:3b:b7:e0:0b:55:f3:ec:8d:2f:97:0d:00:
7b:4a:86:5f:02:4d:e7:6f:a7:9d:4d:3f:fd:9d:b2:
77:2f:0d:b2:b7:07:1a:e7:f0:30:1d:c3:ea:1f:7e:
f8:b7:b6:39:e5:76:e5:64:9a:1e:5d:b2:e2:27:ce:
86:64:c3:7a:9a:1e:dc:30:ba:e2:20:ee:35:62:34:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:21:6F:5E:A2:24:EE:85:AC:BD:AE:2A:81:18:4A:B9:E7:2E:F8
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:19:fb:13:4b:d5:cd:17:c3:b2:6e:7a:68:eb:17:bc:41:
b2:91:87:ef:b1:a7:9e:19:50:d5:fb:23:3e:21:3e:00:30:98:
2f:95:b9:d2:6d:9b:68:73:c2:43:21:2c:21:55:63:90:93:f6:
26:e5:ad:2e:60:91:01:31:73:ab:f5:8d:f7:15:f7:4b:0d:f2:
5f:8f:7b:09:fa:b9:17:d2:27:33:46:82:97:ae:67:3d:aa:a8:
76:4d:48:a0:b2:c5:2c:08:8b:39:b6:ad:df:60:bb:7a:c0:92:
c4:ed:b9:8c:64:1b:e7:72:6a:98:b2:32:49:0f:ee:d6:51:d9:
a6:b0:5d:71:67:f2:ed:41:67:58:9a:56:2a:5b:0f:88:99:75:
54:5a:05:4b:3b:b5:a8:20:51:32:d6:58:7b:47:59:c2:e9:c1:
bd:9f:37:bf:b7:51:b7:2d:0c:a1:24:91:6e:dc:79:c0:8a:b3:
4b:29:b7:ff:57:79:d9:03:c8:2e:67:1a:1d:87:ee:2c:5f:8f:
09:46:29:c2:5d:d3:a4:8d:47:97:34:e9:fd:66:26:2e:33:67:
f8:e4:f6:86:af:01:cc:48:2f:b9:43:1e:4a:10:ef:c0:12:2c:
07:65:cd:ec:92:53:da:51:1e:b7:8e:83:50:bf:2f:f1:1e:63:
1d:06:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:26 2025 by rpki-client