Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: SZbSiPruMB6wn5gh3+k9VLCwnSlVErYQUtVKn053uMw=
Subject key identifier: 8E:DA:1B:7F:2B:6C:C1:CC:80:F1:F5:4E:C8:44:35:C8:AE:B2:9C:0B
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0198D58356C9E84E7958E22C8718E3D12F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0BB8
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: 2oEnfVEgHjgW4M16pvs+Toyi/4MGPqQllqL5Uks2BC0=)
2: aZtA3Tb82BUczOl9SsTYverE7lI.roa (hash: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:56:c9:e8:4e:79:58:e2:2c:87:18:e3:d1:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=8eda1b7f2b6cc1cc80f1f54ec84435c8aeb29c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:56:2d:18:9a:8d:17:64:15:ef:55:01:41:
85:cb:02:59:8e:ff:8f:4f:b1:7c:e3:91:23:52:51:
3d:ed:26:9e:3e:44:f1:e9:72:15:9b:4c:5f:63:4e:
a0:1c:1c:43:05:a1:29:c2:7e:b8:e9:f7:01:a0:be:
fd:3f:f0:70:80:1c:22:32:ee:78:0e:9c:f3:27:c0:
5e:b9:37:7f:59:0c:88:2f:12:b3:04:47:27:6e:57:
6c:d3:a3:61:09:10:14:13:02:e8:3a:1a:f6:5b:cb:
e2:f0:49:1d:6e:00:62:fb:1a:ef:a7:13:76:f2:a1:
dc:07:4e:b8:1c:89:c5:ec:8a:c0:27:8f:b5:d3:00:
68:e5:3f:c3:36:da:8d:57:00:cd:56:76:a4:05:98:
2c:a5:8c:4d:92:c0:89:40:26:3d:9e:56:a5:10:49:
4e:31:05:43:6e:8a:bc:b0:2a:36:ee:11:8e:bd:ba:
2e:c6:13:f5:1e:19:6a:0f:01:43:dd:16:87:18:61:
3f:37:2b:77:58:c2:d9:6a:af:1b:f5:51:f7:8d:9e:
bf:ee:b4:bf:fc:db:9b:6f:9e:e2:47:45:31:96:b1:
11:b2:a4:c3:2a:8d:db:9d:8e:01:56:9c:09:25:19:
fb:f1:bd:d1:a0:39:58:e7:70:2f:96:89:6b:7a:a7:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:1B:7F:2B:6C:C1:CC:80:F1:F5:4E:C8:44:35:C8:AE:B2:9C:0B
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:ad:39:3e:1c:e2:ab:44:66:0a:89:82:0d:99:4d:bb:ec:
9a:ab:09:55:d3:52:bf:ee:18:cb:69:e0:d3:07:e9:7a:07:16:
a6:3e:cf:d6:9c:82:db:b7:bc:90:82:b3:7c:a7:e2:b6:a3:32:
39:fc:f5:3d:6b:88:e5:1e:f2:f4:70:a1:a7:c8:05:c7:ce:f5:
1c:46:d8:e9:02:6c:e0:d0:e6:ce:48:c4:e6:19:33:45:68:79:
9e:9d:1c:c4:40:1c:0e:ba:aa:f3:fe:1c:fc:97:b1:03:79:24:
0e:3a:1d:73:36:79:0f:f9:90:82:7a:10:66:fb:0b:f6:ba:48:
70:af:55:ea:1f:9c:f2:63:29:08:e6:c1:ea:66:6e:9a:fc:3a:
73:10:aa:0e:8f:67:14:9f:32:85:b5:e6:1b:a1:f4:32:af:3c:
45:92:ce:15:81:61:6f:d1:35:1f:d9:77:7a:68:9b:19:aa:86:
d9:89:d8:5e:91:77:bf:e6:dd:e5:94:cb:96:53:03:06:bf:8a:
bb:a0:fa:0e:e3:d4:bc:20:68:51:9d:af:48:63:8b:c1:46:38:
a5:32:7b:ac:01:b3:54:34:f4:d1:16:fd:a1:6f:7f:50:43:b4:
97:50:53:30:aa:21:c0:64:db:1c:47:83:b2:2b:5e:a2:1a:78:
47:81:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:11 2025 by rpki-client