Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: nERCV6wU+PZjEkCZiqxn2qN7ogWwo+4fvKh3loHSDbM=
Subject key identifier: 02:DD:11:85:4E:14:D7:98:BF:79:C4:4D:EA:FE:50:5D:71:5A:0F:BB
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 0199FFFE6EF7B7A1A37B3EA4E2B4365B0659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0D19
Signing time: Mon 20 Oct 2025 05:01:28 +0000
Manifest this update: Mon 20 Oct 2025 05:01:28 +0000
Manifest next update: Tue 21 Oct 2025 05:01:28 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: VXGJSidwamPvWF9Qqcox1K4XUO1HnQocc6RBFnKkkMI=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6e:f7:b7:a1:a3:7b:3e:a4:e2:b4:36:5b:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Oct 20 05:01:28 2025 GMT
Not After : Oct 21 05:01:28 2025 GMT
Subject: CN=02dd11854e14d798bf79c44deafe505d715a0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:64:e0:7c:21:b0:4a:98:69:fc:65:cc:5b:
c7:7a:a7:46:a3:38:b2:1d:95:77:d2:4c:ed:c4:6d:
62:1f:8d:3b:db:d0:aa:29:fe:93:bc:89:ce:8b:56:
c1:cc:ad:61:ef:79:fb:69:5b:6a:4a:61:c6:4d:88:
08:5c:dc:b8:03:03:77:95:bc:5d:91:03:b7:48:f4:
a7:45:42:60:d6:5b:f8:02:da:d5:21:d4:b9:72:c8:
9d:48:45:97:b1:ef:a2:6e:c0:af:c6:05:9d:e2:35:
85:71:d5:3a:69:ee:bf:68:9f:ca:1d:95:4d:af:b3:
c9:0c:2d:5f:63:41:2d:6e:8f:98:bb:d4:ba:1f:dc:
0a:4d:b4:c1:a4:dd:2c:c0:a1:ea:78:79:63:34:85:
85:ef:6b:29:0a:fd:7b:e1:77:ab:f8:00:23:e3:f9:
9f:6a:45:0a:69:e8:6c:3f:a0:1a:7a:4b:c1:4d:f6:
30:f5:2b:c1:97:d7:9e:8c:12:6d:b1:11:53:46:55:
e3:20:f1:bc:a6:27:e3:7e:3b:8d:f7:65:80:85:bc:
e9:be:91:e1:f6:16:11:bd:51:42:b7:16:cf:97:71:
4c:3b:b6:d0:4c:0e:df:ce:9a:74:fe:75:3a:6e:07:
69:e2:24:c0:55:d6:7e:85:f1:7e:38:de:96:a7:a9:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:11:85:4E:14:D7:98:BF:79:C4:4D:EA:FE:50:5D:71:5A:0F:BB
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:c9:72:c7:cf:9c:c3:52:4f:95:9b:51:36:28:58:96:ad:
8c:dd:06:b7:30:cc:5e:fa:43:36:22:38:21:3d:c8:23:7d:c6:
c4:07:a9:1b:a9:e8:7d:a9:72:48:c9:5b:68:39:f0:be:1f:bb:
6d:14:e1:bc:57:6a:7c:11:58:34:00:72:e3:23:5e:cd:dc:49:
f6:9d:da:68:7f:92:7f:40:8c:98:62:4c:12:26:64:61:c2:22:
56:da:00:fd:2f:c6:c9:7b:7e:ad:22:99:ec:8f:bc:8c:f3:56:
e2:83:d9:56:9a:57:b7:e3:10:2f:c7:0e:a7:3b:32:8e:64:2f:
3b:39:47:be:bd:3e:80:df:1b:48:85:41:2c:21:93:1d:94:6f:
fa:bb:80:49:cd:66:b8:a3:a0:49:15:b5:cf:50:94:ce:01:fc:
1e:fb:b4:44:ef:da:83:65:ef:f2:c0:ef:2f:43:e5:6a:3c:91:
89:51:f0:74:41:cf:13:45:54:5a:60:9d:f4:cc:e1:b7:4e:30:
79:e6:f5:c3:4a:91:f4:4b:c7:f6:7a:89:50:8b:84:dc:db:ac:
9f:4c:a3:63:82:26:76:b7:c1:e6:a4:94:db:e6:13:1e:b2:3c:
49:cc:df:03:3c:28:f3:a8:8a:0b:2b:92:3e:90:be:7c:88:5c:
4e:db:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:09 2025 by rpki-client