Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: 9L/k6U1rLUt2tJKv6Zzbj0s+mzPm9q1CsRnaRwCdZB8=
Subject key identifier: BC:19:00:18:9D:D3:B3:25:D6:89:33:FF:8E:CB:5F:4E:8A:75:04:2B
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 0197B6328E36F66A5699E08296CCE9A34753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0EC0
Signing time: Sat 28 Jun 2025 11:00:55 +0000
Manifest this update: Sat 28 Jun 2025 11:00:55 +0000
Manifest next update: Sun 29 Jun 2025 11:00:55 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: spU3bQX/tB7AIU9nXWNFuMBDVAIdCQ9vgVQ/f4hqMNM=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8e:36:f6:6a:56:99:e0:82:96:cc:e9:a3:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jun 28 11:00:55 2025 GMT
Not After : Jun 29 11:00:55 2025 GMT
Subject: CN=bc1900189dd3b325d68933ff8ecb5f4e8a75042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:75:96:f8:91:c2:84:67:ff:12:5f:93:58:
2a:de:c6:b4:e9:d2:ef:35:3a:8c:ac:9a:88:42:37:
df:46:87:ec:79:27:a4:07:19:10:78:30:f2:a9:de:
80:0f:a6:cb:7d:60:f8:9e:e4:06:4b:22:97:7c:e7:
bb:54:0f:8f:8c:c0:4c:10:74:72:76:65:fd:bc:ef:
cc:86:8c:72:23:e7:80:b1:cb:95:e2:68:6a:6a:44:
e3:cf:62:86:dc:c6:54:04:0c:ba:b0:38:dd:4f:b1:
77:0f:0a:99:0d:88:da:1e:94:f8:05:0b:48:63:78:
e6:1f:55:37:27:f1:03:d4:1a:82:e9:19:5d:4f:f5:
d7:4b:c5:9d:1a:9e:e0:ef:9a:38:5b:7f:dc:c8:8d:
b8:a7:04:05:c6:46:16:07:26:c8:78:d4:35:fa:a1:
aa:6b:5a:a9:9d:b7:d6:9f:91:08:2f:93:46:af:3a:
24:2c:bf:74:ad:86:71:76:1b:f6:c8:25:09:af:06:
9c:8f:93:91:d7:40:f3:84:a5:3f:7f:92:31:68:c7:
56:aa:e1:05:97:c3:a1:4f:23:14:9e:ad:36:ec:34:
b7:fa:ce:fa:6c:86:5d:6b:39:f8:97:f0:b4:7b:2c:
12:05:fd:61:99:03:c1:5c:a6:f6:99:9c:fa:fb:75:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:00:18:9D:D3:B3:25:D6:89:33:FF:8E:CB:5F:4E:8A:75:04:2B
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:3f:80:f7:9f:18:47:69:dc:19:15:20:87:2b:c1:0f:c4:
a4:7e:18:28:8e:f9:67:7b:a6:f6:54:5e:8f:10:ac:98:c0:7e:
da:b1:04:fb:9f:62:86:37:c1:7e:73:da:44:34:46:b7:8c:2c:
19:9b:cb:d9:c6:95:85:18:3a:78:8e:eb:78:79:51:16:4e:ae:
b8:f1:92:e6:ea:a5:56:42:21:14:4e:45:54:0e:36:30:85:07:
73:f5:99:6c:8b:ec:35:94:d1:ff:33:b6:9b:20:33:4a:1a:ec:
cc:ca:f5:c5:ec:dc:e9:97:28:fa:78:a0:e2:29:70:84:38:06:
a0:fd:52:2e:55:14:4b:00:08:7b:65:91:d0:63:b3:da:c7:2f:
21:f2:57:69:5a:0c:ab:ac:fa:e0:de:b9:10:52:29:6a:f8:cb:
34:53:0a:ca:c3:34:8d:73:0f:f6:74:fd:b8:24:78:c4:ee:5b:
c0:9f:0b:45:e8:f9:c1:99:1c:31:ca:7b:39:30:4f:27:b2:46:
9d:7f:1b:45:41:a9:56:85:5c:e5:d8:19:3e:b4:85:d3:c7:d7:
9a:d8:5b:98:1a:2a:c4:2c:e0:17:c8:e7:a5:ee:b5:3f:fb:4e:
58:be:b1:83:3f:e7:24:d8:f2:ae:82:9d:87:2c:be:a7:64:31:
03:84:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:59 2025 by rpki-client