Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 4mvGuCqA/y2u8PkdiC95zI/rUM3Df7Wn7ys9g6VBIv0=
Subject key identifier: 19:6C:4B:F0:04:6D:D0:34:63:1A:9C:EA:AF:4C:CB:92:51:2C:9A:EA
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 0198D4A8137AD6DB4C17EA5899ECBCC759A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0C7E
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: 4Ggznn179isZKxnCr98JB14sVe84vT7fDyl0omhfQtA=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:13:7a:d6:db:4c:17:ea:58:99:ec:bc:c7:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=196c4bf0046dd034631a9ceaaf4ccb92512c9aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:fb:7e:3e:b6:f1:75:79:71:9c:a6:27:a0:
b8:07:de:e2:c3:f4:f0:86:e5:51:ea:3b:88:b7:f5:
d1:73:53:e7:76:25:ab:7c:04:0e:16:ac:82:e3:f6:
2c:86:0e:2d:58:36:c6:76:48:60:b8:ac:28:07:8e:
6c:70:e8:05:7e:b7:87:78:81:bf:7c:72:ba:9f:01:
59:52:e7:25:00:7d:d7:23:ab:aa:25:6c:14:ab:2d:
6a:54:75:31:c9:12:e2:46:b1:88:20:70:a9:30:f3:
74:04:83:a9:ae:d4:d7:9a:0d:d8:fe:b2:00:66:27:
71:a7:48:50:3e:30:50:45:a3:43:d3:43:b0:2e:17:
3a:33:35:5f:a5:0a:c6:ab:91:6a:88:c8:5c:14:66:
e1:84:7a:47:19:1b:8b:8f:5a:19:91:88:db:88:3a:
69:05:8e:23:a6:0e:b5:b7:5e:8b:b4:1c:8a:cd:ff:
0f:2d:2b:8d:1a:de:b8:3a:cf:38:4a:e6:7e:90:e7:
a3:6c:4b:03:34:b9:5b:cf:92:bc:aa:94:da:ef:87:
d1:b4:2e:9a:8e:55:1c:13:0d:b7:7e:d0:66:87:a9:
69:1d:1e:33:e7:c4:7b:43:04:4f:8b:41:dc:ca:2f:
ed:08:3d:7d:c2:29:ee:18:bd:a4:a4:c4:54:f4:bd:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:4B:F0:04:6D:D0:34:63:1A:9C:EA:AF:4C:CB:92:51:2C:9A:EA
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c0:28:86:ac:62:61:db:f4:61:6b:10:ee:f3:e7:60:fa:a8:
c0:57:7a:7e:e8:ae:6d:84:e5:62:95:cf:f2:1b:45:99:03:56:
ab:dd:38:8a:e9:fa:c5:76:68:f6:ed:1b:f8:58:58:ee:87:9e:
52:90:7e:a0:1a:4a:2d:f2:84:94:34:1d:a4:90:b1:eb:31:ae:
36:a2:6d:44:86:c1:dc:b5:fb:3c:e5:bb:8d:4c:cb:de:ea:fa:
92:38:69:5a:ad:2d:3d:fa:c9:70:f4:1e:ec:d1:aa:e3:57:82:
a4:87:fd:5f:9c:67:e2:f2:65:bf:47:b5:f1:06:7a:22:21:b7:
c0:f5:ba:3a:6a:e4:10:7f:96:e2:4c:4e:1e:72:6f:0f:8c:3e:
3c:e0:6c:67:02:cc:57:94:f4:51:e7:bd:1c:fa:37:12:1c:c9:
0e:6c:c6:e8:e7:40:4a:a0:d5:c5:60:7e:13:ab:fe:0f:6a:31:
70:6f:64:2f:f6:6d:2a:ce:07:bf:ea:2e:82:e8:d7:3b:d0:13:
b1:cb:5b:fd:f6:56:8a:2b:7f:7d:25:32:18:9d:9e:6b:c6:2d:
b4:ce:89:43:3f:10:61:e3:09:1f:f4:22:7a:d8:c1:f1:51:cc:
b5:5a:9a:41:d2:a7:6f:96:65:4a:db:42:f9:0f:a2:10:44:0d:
a6:5e:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:46 2025 by rpki-client