Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: xPh4cFk/iVtqszAWPTejijRGATJEY84FIDUAv0pUWjk=
Subject key identifier: 35:A6:22:D4:0C:70:B2:0A:E4:D4:17:E5:20:85:60:5D:DA:83:FE:C7
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 0198D5837ACC4C556A70F724B5B72D101715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0A33
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: VkxMIdlKDu0JC7iAFV7/GGBwbM4UIrhXi5+SdJ4JXXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7a:cc:4c:55:6a:70:f7:24:b5:b7:2d:10:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=35a622d40c70b20ae4d417e52085605dda83fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:78:27:54:66:7d:4c:3b:ab:da:c7:d4:69:
d6:7f:96:e2:09:04:04:69:b4:66:6f:8e:08:f0:ea:
e4:b8:7f:7f:e5:a4:91:bf:e8:f7:f4:1f:90:5f:d7:
28:6e:8c:ae:82:ca:8d:18:11:5e:7d:0c:51:64:8e:
a8:b7:a8:5c:6c:d9:89:55:0f:42:e1:0d:58:57:a7:
90:78:d4:94:88:62:50:3a:c2:54:51:e6:9b:90:70:
36:b7:05:7b:91:e4:77:67:7f:b1:7e:34:e0:2b:3a:
d3:11:ad:52:c1:ed:ea:5d:6d:e8:1c:b3:c1:b8:a2:
4e:89:ee:ce:d4:fa:9e:7f:bb:16:2e:1f:ba:c7:af:
0a:4b:05:37:d7:39:71:22:de:72:2e:d9:e1:38:82:
06:39:69:0b:ff:50:da:3a:ff:99:d4:44:8a:6f:89:
e7:83:d6:3f:da:3d:4c:06:39:54:81:7a:f4:b7:be:
f6:82:6f:91:dd:d9:21:16:45:d6:8d:34:d4:e9:20:
81:18:7a:32:30:a9:fa:e1:26:15:83:b5:c3:a8:5e:
df:34:b7:cf:03:25:f5:92:1b:8f:24:a2:06:c9:ec:
e7:19:c7:8f:bf:52:8c:6f:25:5a:71:e4:14:32:c4:
2c:22:88:a1:22:84:3e:32:f9:76:a6:b4:ae:4a:7d:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:22:D4:0C:70:B2:0A:E4:D4:17:E5:20:85:60:5D:DA:83:FE:C7
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:5c:23:b7:d9:3c:d6:66:6b:04:b2:c9:59:3f:d0:13:b2:
3b:98:f8:bf:ff:8d:9d:ad:f2:78:72:9b:21:19:dc:2b:5b:de:
84:94:c5:3a:3b:a0:b4:27:fb:91:5c:5c:2a:04:a3:2d:d5:e0:
c7:86:c8:2f:fd:88:bb:f8:4e:35:08:35:3f:7a:52:17:3f:a6:
4a:a9:e5:91:9e:e6:94:5e:a3:0f:64:2c:f8:e6:3a:1b:d7:73:
0d:0e:3b:c7:14:47:51:c1:3c:6f:5e:f0:95:71:8f:ba:0d:5c:
f9:4d:78:a3:59:f7:56:e2:ff:0d:0c:b7:f9:57:5c:25:0c:4f:
7e:a7:00:12:ed:11:84:98:5e:99:d3:9f:ad:ae:15:63:51:36:
0b:79:b8:fb:3a:91:70:44:bd:87:45:40:33:9d:e8:f3:61:ca:
f7:a0:46:89:3d:60:2e:eb:1f:0c:c3:35:dc:12:57:fd:bc:23:
bf:af:70:de:65:1f:f9:82:f7:bd:79:7a:94:ee:3d:4b:ae:ab:
1d:08:bf:fc:59:0a:14:5e:e0:75:39:db:23:56:55:eb:c8:7c:
8d:7a:dc:5f:6f:20:72:98:8b:ec:d9:18:7c:44:1d:f6:ee:d5:
71:ff:09:15:17:13:6f:71:eb:d1:bf:35:b7:f4:30:a0:0c:96:
ee:fa:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:00 2025 by rpki-client