Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: otyfr6s77QqV0jGpkZixQJfiw0BGWxFMd+382hqIZvM=
Subject key identifier: BD:29:58:0A:7B:A8:7E:77:F4:01:24:39:89:66:2C:E0:3B:B4:81:D1
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 0198D474730106B85FE84455B3A843040709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:04:18 +0000
Manifest this update: Sat 23 Aug 2025 01:04:18 +0000
Manifest next update: Sun 24 Aug 2025 01:04:18 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: DoItGlCTf3p5ru1F72UAUA9ZODwBFlVJLPjqJh61560=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:73:01:06:b8:5f:e8:44:55:b3:a8:43:04:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Aug 23 01:04:18 2025 GMT
Not After : Aug 24 01:04:18 2025 GMT
Subject: CN=bd29580a7ba87e77f401243989662ce03bb481d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:b3:89:c7:57:95:22:b4:91:03:ae:4e:1d:
96:77:e1:df:e2:5b:04:ac:40:3c:d0:83:9c:4a:86:
08:1e:c3:51:cb:28:ec:d1:6f:e7:64:aa:8b:a1:11:
0e:14:0b:cf:e8:11:75:7a:c9:59:94:98:56:5f:48:
01:39:11:e4:90:41:3d:e3:54:23:13:ae:e0:c8:92:
ca:ec:82:41:81:ff:fe:1c:d6:fb:6c:4c:3e:69:35:
ba:8d:1e:2c:3a:1f:fe:95:ee:27:c9:2f:18:52:ac:
12:fa:c1:21:20:cf:17:47:99:d1:71:8a:d0:1b:46:
b1:35:c9:53:70:83:9b:0f:08:c9:a3:ef:55:e7:00:
f6:dc:45:ff:88:6e:f5:76:82:f3:08:29:ae:be:5e:
3c:c5:02:fd:c5:db:f5:4f:9e:f6:67:85:97:02:9e:
90:1d:7a:b8:c8:ff:b0:6b:f7:fd:66:ee:25:4c:46:
71:06:56:3f:68:d3:de:6f:87:e6:7b:03:bd:3f:84:
1e:40:8b:82:66:af:93:53:c9:4d:73:be:50:e4:32:
19:0e:df:56:2a:d6:d1:02:af:e3:0c:f4:4e:03:a8:
4b:de:96:d8:bf:e2:8b:f6:5f:a4:c8:30:0d:d4:55:
66:51:b7:f3:64:ef:9c:46:75:07:cf:61:45:29:7d:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:29:58:0A:7B:A8:7E:77:F4:01:24:39:89:66:2C:E0:3B:B4:81:D1
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:74:b8:97:f5:be:13:6e:2f:c7:db:b0:19:df:bf:e7:eb:
82:59:7d:8b:70:de:83:d4:4f:81:5c:7b:ec:ea:a6:c2:9e:7e:
fb:3b:ff:09:7a:1b:4a:42:e9:70:ac:80:62:8a:62:d5:1a:24:
ae:d9:96:87:44:e9:fe:e1:b3:73:ad:ae:b0:ca:62:ab:08:55:
bb:84:c5:ba:08:ed:60:77:49:b8:9c:98:92:e2:24:14:12:7c:
85:55:5f:c6:e4:18:96:c6:2b:87:17:06:83:72:80:3e:13:32:
83:93:0b:bd:55:61:13:5b:62:66:88:62:d4:4d:7e:73:b9:b6:
a1:a1:b4:d5:a2:17:bd:88:08:25:93:50:78:bd:c0:25:02:86:
31:ad:12:9f:e3:d9:b4:ef:3c:70:b6:2e:0a:3f:be:05:8e:d9:
1b:1e:06:7b:04:0c:40:f0:f9:ec:9a:10:16:48:52:57:66:db:
63:77:b9:e1:d4:7f:ea:5e:57:c1:7a:d1:22:77:c9:59:03:01:
ba:b5:18:89:c1:63:d1:3c:cf:c5:12:08:6b:f9:ae:b1:90:42:
16:0b:67:80:96:0e:c0:73:e4:27:b5:f5:69:96:81:52:d0:d0:
37:45:9b:15:eb:c4:f3:d3:ac:fd:99:95:92:9f:d0:56:e1:88:
22:6e:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:56 2025 by rpki-client