Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: 6smMtVU2IJMQRmr25gzLQITStUOylUnFvzNqi66roug=
Subject key identifier: 6E:80:F3:9A:8E:5F:47:69:0A:20:0E:96:C3:00:6C:B0:DA:94:B3:52
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 0197B5C502326C625EA61291820560E39539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 099E
Signing time: Sat 28 Jun 2025 09:01:16 +0000
Manifest this update: Sat 28 Jun 2025 09:01:16 +0000
Manifest next update: Sun 29 Jun 2025 09:01:16 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: qIJjrKoELYJ2rMgKKeeW4mR5DzGL35FyGgTpHPUHLHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:02:32:6c:62:5e:a6:12:91:82:05:60:e3:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Jun 28 09:01:16 2025 GMT
Not After : Jun 29 09:01:16 2025 GMT
Subject: CN=6e80f39a8e5f47690a200e96c3006cb0da94b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:f4:bf:58:20:18:ca:3d:96:ef:f0:19:e8:
9c:a8:f2:be:c6:3b:f8:bd:d0:cd:5b:cf:bb:16:e8:
d1:20:33:5f:aa:ab:e8:c9:ee:a0:96:35:3f:68:5e:
7f:13:21:d4:6d:63:8b:c3:b4:7c:7e:0d:d2:5e:ca:
eb:10:d4:e9:88:70:18:91:d0:d5:4e:c2:02:6c:82:
19:4e:b8:b0:92:29:0e:b4:b3:a9:ca:41:22:16:89:
61:1e:3a:46:ab:27:7e:11:c6:eb:45:d9:be:bb:ad:
11:17:bc:1d:97:e2:42:3c:35:8f:c0:8f:7b:a5:d4:
8c:76:db:be:cf:b9:98:c8:27:85:bb:9e:6b:64:7e:
f8:77:6c:e5:5d:60:29:c8:0d:fb:6c:b6:e9:af:0f:
00:ad:92:07:3d:61:9e:c4:32:63:28:2d:f6:68:bf:
04:eb:bd:a5:38:a6:67:7b:48:de:6a:b0:8b:0f:e3:
d2:c3:5f:c2:6d:3f:9d:dd:11:b8:45:d0:84:f1:ad:
b8:a6:3a:b6:4b:86:0c:0d:8d:eb:03:83:92:52:47:
08:87:c7:b5:a9:8a:88:63:eb:db:56:87:85:c6:28:
35:5f:37:a0:d8:4d:72:1c:47:9f:db:a5:1f:93:b7:
8b:ad:71:52:03:4b:c3:68:4c:ff:89:4f:7d:4e:bc:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:80:F3:9A:8E:5F:47:69:0A:20:0E:96:C3:00:6C:B0:DA:94:B3:52
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:10:25:58:e4:86:30:91:7b:81:3a:8d:bb:86:65:20:5c:
12:eb:e0:ca:af:1f:01:56:0b:64:a8:9b:8a:d3:57:0d:10:63:
db:33:a9:8d:4f:bf:c7:53:10:27:44:4e:ae:4d:90:8b:f9:1b:
ec:ff:75:2d:ed:29:4f:fe:87:a6:67:48:9a:bc:6d:dc:22:69:
78:e4:ac:08:ae:37:74:5a:a8:a1:90:f3:8f:22:ff:d2:a1:7a:
22:8d:df:6b:56:b4:e5:3d:51:84:56:44:f4:62:01:ca:0b:13:
4e:69:ae:67:56:53:e0:08:13:2c:10:04:d2:17:0b:8c:e3:31:
a8:a9:e0:b2:f5:10:25:43:e7:e6:f3:b5:e0:1c:4b:af:9a:fd:
d7:f5:e4:00:49:24:ad:08:c6:38:d3:62:b1:c0:41:b1:ae:ca:
a9:5b:2d:35:cc:92:06:fd:3e:b5:b9:69:a4:a7:4b:6a:1d:bd:
40:c8:e9:83:64:86:60:c6:99:d2:cf:79:4f:bf:35:29:c6:15:
6b:7c:68:1a:4c:f2:b2:a9:56:e6:e5:18:9c:b0:85:4a:8f:51:
ea:e8:b5:c9:b9:38:d7:04:f4:da:97:63:66:3e:97:63:cc:57:
47:39:e0:ce:02:1d:d4:0e:20:f1:1b:ae:63:cc:1a:07:fb:94:
af:dc:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:58 2025 by rpki-client