Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: WUMESUml5uF7YSNM7zaj8wLRvrRJDL4xGrZxDDqznPQ=
Subject key identifier: CB:A1:12:4D:82:10:D3:D2:AC:4F:67:0D:7E:44:9E:06:D6:90:5E:FC
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 0197B6A1715C12840DC8FB110687A811005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: kSD73pxbTu5i2BEw2aXUxuFWzc7yUmviEV9X/aCKGFg=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:71:5c:12:84:0d:c8:fb:11:06:87:a8:11:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=cba1124d8210d3d2ac4f670d7e449e06d6905efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:81:aa:d6:91:32:25:52:bc:7c:98:a9:b6:
b4:33:5f:45:74:5d:26:f6:db:c4:21:06:37:90:b8:
f9:d0:28:57:27:bc:03:9e:66:b4:63:38:5a:46:b3:
20:5e:df:32:f5:6e:b0:dc:e1:f4:83:5f:47:f9:68:
63:f8:98:dc:d4:8f:d9:20:37:2f:d8:af:1d:ef:30:
74:06:dd:71:9a:5a:5c:0d:e4:38:f9:ef:59:76:65:
37:73:e2:4c:7d:0b:62:32:e8:e2:71:fb:06:cf:2f:
0e:08:d2:c5:24:e6:61:95:7e:fa:bc:ed:fc:aa:f2:
4d:c1:5a:e1:48:11:b8:a0:d7:74:31:ed:30:c3:c8:
73:7c:bc:b7:c4:63:8f:a0:89:43:88:fc:f7:b1:c7:
bf:6b:03:48:52:4a:ca:ec:41:28:bc:9f:73:e5:29:
6d:af:6f:4f:b3:e9:15:26:d7:81:b3:8b:61:e2:de:
5f:aa:33:be:2b:e4:ee:94:0a:93:e7:11:ec:70:9b:
11:21:ba:6d:90:7c:8e:59:3c:08:80:4d:19:67:79:
80:38:19:e5:87:2a:43:8c:e4:4e:2b:6c:09:db:d4:
1b:d7:70:54:4f:48:c5:cf:6a:c2:14:14:fd:98:a4:
11:e6:31:12:d8:ed:c3:4d:b4:b9:07:57:78:00:77:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:12:4D:82:10:D3:D2:AC:4F:67:0D:7E:44:9E:06:D6:90:5E:FC
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c9:27:a2:c0:ca:13:39:41:9f:62:a2:cb:f2:86:43:10:ea:
bb:e9:74:d6:ed:49:50:05:94:a6:7e:4f:d8:79:f5:8c:00:b8:
76:92:88:2c:42:1c:9b:3c:7d:fe:20:3c:88:d2:ff:18:22:6a:
94:c1:0f:5a:35:56:dd:8d:9d:0f:3b:ca:bf:ff:dd:d1:f5:d3:
3a:3e:fc:2e:6d:11:51:5a:ae:d4:6b:55:bf:d6:ed:83:78:ca:
9d:69:8b:96:b1:19:b0:d1:5c:ea:10:a5:80:0f:1c:ca:ad:89:
39:f1:80:35:b4:9a:db:27:2e:37:0d:01:96:f1:56:e3:d9:b3:
9c:4e:62:7a:be:4a:11:07:05:5d:7d:9d:da:86:2f:e2:aa:03:
98:4a:13:27:d5:0b:08:f0:cd:41:65:9e:ee:e7:c2:73:08:9c:
99:a2:ef:98:03:07:f9:6c:7a:86:61:a8:18:7d:25:ff:ea:74:
e6:b2:9d:c7:94:f7:57:c1:38:78:05:0a:9e:77:e2:78:4b:20:
6a:62:52:0b:11:1a:f8:43:9c:59:b6:c0:38:11:5f:61:54:f2:
ca:d9:8e:fc:c7:74:f5:2a:e5:c8:e0:0a:9f:18:d4:09:30:02:
a6:22:07:33:67:d5:3b:ed:33:dd:18:1b:75:40:c9:71:bc:eb:
bc:d7:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:50 2025 by rpki-client