Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: 2hRd2wV1FnQACAA3KnR+HQYtPT7At+WBVNig5fR/8fg=
Subject key identifier: 5C:8A:98:9D:97:B2:CE:7F:C7:42:11:B8:32:ED:C9:7A:0B:01:F0:9A
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 0197B820CBF345F75DC0CF81665A2BDF1B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 02CC
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: 2TZOtyurwAYLA59AaYDqd8KAQZg7VN81Ar2/MdyE1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cb:f3:45:f7:5d:c0:cf:81:66:5a:2b:df:1b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=5c8a989d97b2ce7fc74211b832edc97a0b01f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:77:28:c1:71:9f:56:3a:5e:1e:0d:d1:0c:
ac:c5:14:f8:5a:34:c8:4a:bc:2c:4e:d1:6d:13:54:
d6:5d:66:80:5c:85:25:e0:75:20:c7:c8:af:af:ef:
dd:27:d5:50:02:0b:c0:3f:97:e1:d6:47:f5:c6:f7:
70:43:7c:e0:79:69:c8:a2:eb:46:f3:c7:4e:61:54:
45:bb:9f:60:d5:65:db:09:10:96:72:4a:ad:73:4e:
c0:38:91:52:ca:b5:58:36:e8:51:30:a3:c5:3d:47:
3e:8e:36:45:46:18:d7:c8:94:de:e7:c3:2d:85:5b:
df:f5:33:e4:61:31:b9:bf:34:0c:7b:c2:e5:70:bc:
a3:c5:f5:ff:17:97:65:59:4e:0e:59:c8:37:62:47:
9f:3f:fa:c3:32:7b:6a:9d:1b:b1:d9:19:a4:69:2e:
2d:b6:c0:74:ee:95:79:a9:1f:af:79:b2:da:3e:2c:
67:5d:26:c4:d4:25:c3:36:e9:5d:b8:05:c7:77:e1:
ee:cc:d9:55:c6:c0:e4:96:5a:65:c4:2d:33:f0:9d:
a9:60:78:15:28:0d:c6:8e:b2:6b:86:16:46:0b:a4:
fa:2b:e1:12:88:01:09:85:26:a9:a7:14:5c:24:a6:
12:26:28:c6:21:6d:43:3b:84:25:26:4b:0b:11:e7:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:98:9D:97:B2:CE:7F:C7:42:11:B8:32:ED:C9:7A:0B:01:F0:9A
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a0:50:5d:72:fd:77:aa:56:5a:e3:25:46:bc:0c:79:a3:62:
26:26:5f:ea:3a:4d:3c:6e:38:31:b8:3f:56:4a:0c:9b:c5:ad:
17:52:90:f5:a0:56:fb:7d:85:26:52:cd:7a:46:dd:81:0d:66:
da:14:65:9d:de:37:92:62:a8:a4:75:06:d6:d0:19:08:e2:17:
6d:42:91:e9:fd:d2:d1:ad:54:db:03:b9:0b:83:bf:0c:88:02:
96:89:80:44:33:c1:78:b8:0f:82:25:40:91:9a:d2:00:fc:68:
e9:be:2f:90:07:ad:38:99:38:b4:9f:b7:18:b6:fd:a3:72:fb:
91:3a:75:b1:7b:4d:f2:70:81:13:a5:c3:6f:d2:3e:a5:ea:bd:
79:40:c8:67:2f:c4:65:fd:5f:a5:f4:26:63:57:76:aa:bf:b9:
39:cb:52:b7:a3:bd:10:d6:56:00:cb:5f:76:1d:15:b4:d0:3a:
e7:e7:70:70:e6:f0:d1:f1:46:bf:e8:26:cd:60:b9:fa:ae:47:
24:04:b0:12:bb:62:53:bc:f0:87:1c:28:f9:d2:1b:86:bd:e3:
f0:b3:c9:c5:53:67:1f:bb:e0:8a:25:f3:8a:77:2a:14:39:1e:
61:21:cc:32:30:9e:a5:5b:5c:99:1a:2d:59:0a:b0:be:90:ea:
61:1f:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:29 2025 by rpki-client