Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: QxiIAFgAbBmOcJ8h5eFi5APMY8jndkMk0eCW9Qm8FEg=
Subject key identifier: FB:B3:0E:5B:9F:3E:DB:45:E7:99:52:07:E5:2B:09:76:3E:10:C9:17
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 0198D5F17F8D761FB139639D2A65F2F9875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0BBD
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: s+Y/YtMPi3LliHNjEOi1jFb+3MSkeUymJbn0+gUse3s=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7f:8d:76:1f:b1:39:63:9d:2a:65:f2:f9:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=fbb30e5b9f3edb45e7995207e52b09763e10c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:c4:0a:8a:19:fc:55:16:5f:f4:53:22:6f:
0d:3b:74:32:97:90:8a:03:6a:ea:74:ea:77:4e:34:
d5:be:db:a9:59:f8:f4:0f:d4:1f:19:83:84:d2:50:
66:1a:d2:05:69:22:5c:99:49:8b:62:87:aa:8d:d3:
ba:86:b4:77:29:9b:90:77:bf:bc:f2:0c:67:01:43:
d7:9f:23:c6:c6:a6:e7:b9:73:e5:b1:06:f6:24:97:
7c:9a:cc:a7:1d:15:95:0c:05:99:85:f7:8f:16:c6:
c1:13:c7:49:e2:25:ca:d0:cb:30:2a:20:a9:ba:05:
ff:b6:ea:3c:75:c1:78:49:21:af:37:93:61:de:54:
58:11:47:fc:0e:fb:f1:6f:b8:88:bf:2a:68:d0:51:
10:b3:77:5e:e4:ca:41:0b:a4:be:c4:9b:f5:0a:77:
c6:d1:b2:12:34:3b:1c:40:d8:8c:f8:8f:09:97:8f:
92:f9:5a:f3:3c:22:4d:6e:22:4a:a1:db:36:ed:a7:
1c:a4:8a:36:77:6d:14:f3:ca:26:09:87:a4:db:66:
a0:f5:e7:a9:c1:b4:31:c5:bf:b4:0c:38:3d:79:8b:
b5:26:1c:e6:13:b4:9e:d1:17:fe:7d:e9:40:19:e0:
8f:fd:49:40:a7:4b:fc:fb:73:b5:d1:a0:48:3a:13:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:0E:5B:9F:3E:DB:45:E7:99:52:07:E5:2B:09:76:3E:10:C9:17
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:02:86:73:c1:1c:10:36:b6:34:c9:01:d0:a5:8e:6f:ca:
bb:cc:10:41:1c:29:38:43:76:00:af:c1:4b:80:87:58:02:5b:
c6:b4:6d:c3:6e:e5:6e:c5:cd:86:9f:71:e0:93:76:a4:7d:9d:
21:01:2b:6c:59:80:a1:1c:2d:d1:d8:f6:20:9a:5f:dd:37:14:
01:5f:22:13:77:08:71:88:71:7f:47:56:af:6b:d9:e2:f5:5f:
f4:b5:b2:70:83:8b:9f:35:16:9a:9e:07:49:aa:56:a5:b7:c7:
2f:67:d6:00:60:9c:15:b5:e4:dd:ef:fd:7f:3d:06:82:5b:88:
8b:fb:fb:2d:c1:3a:cc:81:5b:a9:da:5f:43:7c:cc:80:60:23:
c5:d3:d8:67:9a:10:04:6b:87:ab:aa:55:0b:5c:23:47:6b:44:
a2:eb:2d:e6:3e:1c:5a:8e:ca:86:67:2d:fb:d8:ae:90:73:a5:
49:c5:19:6c:c2:86:46:c4:55:af:48:d0:c6:5d:93:de:3a:42:
ed:d1:20:45:58:c7:d2:18:82:a7:bd:a2:ff:7f:fc:59:ab:16:
5c:b7:90:ee:fa:8c:bc:7c:3e:c0:8c:e2:a2:0c:60:d3:cf:e0:
90:5e:14:08:49:59:fe:c1:aa:c1:4e:3d:95:2d:7b:8c:6c:f8:
03:f0:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:51 2025 by rpki-client