Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: a4vQ5PMWOneLZWqdfRxhaXXUwaM3/CbKDht1QtXzPcs=
Subject key identifier: 4C:35:94:5E:34:FA:08:E9:9F:72:FE:B4:B1:17:1C:C9:F8:E4:53:4E
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0198D6CD68932A9708A7FFE4F652873F7135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 084A
Signing time: Sat 23 Aug 2025 12:00:42 +0000
Manifest this update: Sat 23 Aug 2025 12:00:42 +0000
Manifest next update: Sun 24 Aug 2025 12:00:42 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: 6PQmWthUMVtyh0+lGExds0i/HV5ga0bCYhzDQ2sjYwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:68:93:2a:97:08:a7:ff:e4:f6:52:87:3f:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Aug 23 12:00:42 2025 GMT
Not After : Aug 24 12:00:42 2025 GMT
Subject: CN=4c35945e34fa08e99f72feb4b1171cc9f8e4534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:ff:1d:3b:e0:de:9d:78:74:3a:0d:bc:aa:
31:5f:a3:45:8a:f0:e9:55:a8:b5:44:2a:8b:47:d6:
06:f9:85:31:9a:5f:d5:dc:ed:ee:21:f0:24:0a:6d:
0c:5e:ac:e1:61:7d:36:a0:33:db:c3:56:2e:8d:1d:
14:a9:14:20:a5:a1:27:b1:18:84:56:ba:89:88:a0:
f1:48:27:e0:11:05:b1:27:98:86:12:c2:06:26:18:
0d:52:d8:94:29:fb:68:97:47:75:1f:6f:95:51:31:
6f:af:4e:14:49:37:41:46:f8:36:a9:c8:b9:49:cb:
44:d0:ce:7a:b9:02:c4:10:4d:32:f0:96:16:28:56:
f1:7a:17:48:54:ee:30:ac:fe:47:55:6f:83:30:7b:
64:a2:db:26:b9:01:5c:91:ce:1f:4e:9d:a9:b3:1a:
30:58:87:3f:6e:e0:6c:f6:ab:0d:12:7d:23:3c:b4:
38:cd:67:df:a8:4a:06:79:38:bb:58:f0:c7:a2:d3:
71:4a:a7:5e:ee:f0:a8:0d:91:14:f8:79:3a:86:5f:
0b:34:23:6c:d9:54:1e:04:b8:38:b3:91:36:f2:3f:
c5:b3:df:48:09:06:50:a7:4a:9a:9c:64:19:61:8d:
9d:04:07:e1:1c:eb:bb:0f:25:06:59:5b:c2:ed:cf:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:94:5E:34:FA:08:E9:9F:72:FE:B4:B1:17:1C:C9:F8:E4:53:4E
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:c6:c9:1f:0a:64:dc:66:ca:53:36:23:4f:a3:b9:b4:9a:
9c:34:6f:09:1c:a5:ba:3a:68:7a:9f:17:38:4d:08:56:1a:f8:
2c:5d:01:9e:9e:48:9d:96:1e:d0:69:e4:62:04:51:e8:2a:a2:
09:37:93:6a:66:df:01:5e:aa:f9:26:bd:f5:21:23:83:2b:f9:
d2:a2:f9:82:d4:68:4b:22:1f:6f:86:64:42:fd:a2:65:8d:c9:
14:95:82:f4:3d:af:0b:ec:41:2e:d1:bd:7c:74:79:77:f0:c3:
4a:01:e8:00:81:51:6b:57:59:16:04:00:82:cc:93:a6:71:b3:
19:a8:84:20:c6:81:bb:62:f5:62:3f:b1:95:06:45:c7:98:c1:
c4:90:c6:d9:78:92:c5:5f:13:56:8f:85:bb:f2:8b:e0:44:64:
66:55:56:69:e3:b2:86:3f:20:8a:9c:4d:88:de:28:b7:f4:df:
b8:5d:66:85:a5:7b:4d:87:92:13:27:c8:9d:ff:3a:14:55:08:
00:fa:30:7e:4e:7f:c8:7b:0c:96:21:a0:89:f3:df:97:a2:36:
d6:4c:21:ec:38:1b:04:95:72:0a:95:8c:75:78:35:b3:18:49:
84:df:1f:97:cd:a7:6e:5b:d5:53:c3:51:fa:b4:27:f2:8b:7b:
c9:91:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:46 2025 by rpki-client