Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: cvyQ9jvkvoDSqEGQhj2fVKmxCMCmRvJKSk6nwdboCD8=
Subject key identifier: 8E:A5:9D:4B:72:4C:A8:F6:D8:0E:3C:B2:74:87:4C:1E:72:81:08:1F
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 0197B88F8AEAF8D79088A9FCAA9217F20804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 32
Signing time: Sat 28 Jun 2025 22:01:44 +0000
Manifest this update: Sat 28 Jun 2025 22:01:44 +0000
Manifest next update: Sun 29 Jun 2025 22:01:44 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: WwgGyteV+lwEiTUapEX3aqXdl7FCdCZrsG0G28H1XGU=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8a:ea:f8:d7:90:88:a9:fc:aa:92:17:f2:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Jun 28 22:01:44 2025 GMT
Not After : Jun 29 22:01:44 2025 GMT
Subject: CN=8ea59d4b724ca8f6d80e3cb274874c1e7281081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:aa:ac:b7:a4:c4:33:f3:10:96:1b:d6:5f:
56:e7:f4:a5:d2:08:42:6b:55:39:68:75:1d:a2:de:
f3:a1:aa:9b:cb:db:0c:d8:3b:dc:10:bc:04:b0:33:
5d:d3:45:00:01:b5:de:f3:ae:d3:00:31:cf:1d:56:
a1:33:74:b2:7a:b9:2e:09:4a:5f:6a:5b:9e:9b:9e:
71:6f:22:b0:95:e8:40:15:55:f0:bd:26:c6:5c:3f:
f4:42:ad:2a:a6:13:44:9a:cb:3d:d4:b5:90:03:0f:
7b:a1:a6:66:5e:08:11:3f:43:fa:7c:78:95:0a:28:
26:f2:7c:99:a6:3f:d3:1f:48:a9:7f:7c:63:e8:95:
65:00:19:f7:a3:ab:fd:44:4a:24:69:1a:a8:76:f5:
a6:14:c7:df:95:a9:f1:96:92:a4:4f:ee:86:7f:d7:
3a:45:18:02:93:c9:e5:fb:de:28:91:b2:bf:71:c2:
a5:04:6d:fe:7e:69:ed:d6:26:19:6d:68:b4:79:be:
48:dd:72:27:bc:29:23:45:76:bf:20:53:d0:db:42:
40:26:8a:3d:ab:c3:c6:38:70:cb:82:72:8b:36:a9:
7c:7c:60:f3:78:c2:cc:81:33:e2:d2:95:51:ab:a8:
bb:92:9b:6d:7c:7a:f6:1f:a8:5f:94:75:39:88:07:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:9D:4B:72:4C:A8:F6:D8:0E:3C:B2:74:87:4C:1E:72:81:08:1F
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:44:fc:bf:37:4a:36:8e:4a:1c:d7:03:4a:57:62:f8:85:
5d:e3:7c:db:9d:97:a5:4d:7d:68:a4:08:a1:c0:29:93:d4:b0:
c3:3e:1e:e6:92:72:63:34:29:8c:77:95:ff:84:70:16:85:e5:
59:cf:66:c7:cd:89:8d:b2:5e:73:3c:00:e1:13:5a:bc:1c:a1:
7f:20:2b:b0:87:01:f0:7c:9e:e6:f1:b8:71:69:9c:52:83:5e:
ca:16:2c:78:c4:7e:16:8e:cb:62:5f:7d:0d:a4:0a:e7:ef:2c:
4b:e7:62:0d:eb:42:14:29:3a:00:d3:90:ae:35:62:8f:76:f0:
68:0f:18:a9:04:70:2c:48:70:fe:97:25:fe:b7:67:5e:6d:28:
86:af:62:b7:89:1e:14:95:b8:7c:32:14:bb:49:97:e5:85:1c:
06:59:90:31:4b:58:71:a2:cf:c2:b2:99:6d:5e:c6:0c:b6:8a:
89:ee:8c:0b:ff:b8:93:f7:38:72:57:e0:79:72:71:22:2b:30:
d5:cc:f2:f0:b7:1e:64:15:df:4c:bb:56:47:00:50:1e:7a:ee:
96:e1:3e:a7:7f:47:42:2f:a1:7d:af:bb:a5:e3:08:5e:2a:2d:
24:ea:b9:8b:40:7b:11:86:84:f4:a5:74:37:ba:45:da:d2:de:
27:a4:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:06 2025 by rpki-client