Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: ApnF65EHIq3wOx3ukAC+IKke2GSsb3WCvNVix2tIoMs=
Subject key identifier: 0E:D9:02:DF:01:4E:46:76:D3:93:29:18:62:DB:E6:1F:79:F6:A3:38
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 019896A5A5B0897E79452B308ACF950802D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:01:34 +0000
Manifest this update: Mon 11 Aug 2025 01:01:34 +0000
Manifest next update: Tue 12 Aug 2025 01:01:34 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: wPDJDCj60XY9o8Ta5BaU3xAwITJjOiAx7LOxZgdiZSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:a5:b0:89:7e:79:45:2b:30:8a:cf:95:08:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Aug 11 01:01:34 2025 GMT
Not After : Aug 12 01:01:34 2025 GMT
Subject: CN=0ed902df014e4676d393291862dbe61f79f6a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:5d:2f:27:b7:60:26:5c:7a:1a:a2:ff:24:
b4:5f:6e:74:9c:18:e6:a4:81:48:90:8d:2d:b0:4e:
2b:a0:e3:8a:d4:10:e7:ad:4e:af:4a:3c:01:86:ef:
71:b7:48:3c:28:2e:ab:2e:f5:a7:98:09:04:2a:50:
ea:63:7c:81:a4:54:7e:65:e4:38:ea:c7:66:b1:24:
26:42:6b:c2:f5:74:4b:d2:d4:8a:4d:ac:94:69:d5:
b2:fe:cd:7a:50:76:db:78:a6:50:e1:35:74:64:52:
59:83:9d:74:cd:9e:28:f8:44:e6:5b:5e:03:f3:51:
68:35:25:9e:6d:a0:5f:f1:81:d7:02:35:dc:61:7b:
32:1c:9a:09:9a:c5:5b:26:58:e3:db:1f:85:f8:9b:
78:70:dd:39:1b:ae:47:da:40:c4:d4:83:8f:74:de:
3a:5d:a7:08:3c:9c:b2:4f:85:b3:35:6d:49:0c:dd:
ba:56:dc:94:18:ef:a7:ec:4f:38:e5:a7:f3:d2:a4:
a3:cb:89:b4:cf:95:d9:ed:23:6b:27:b9:05:b7:2c:
9b:ce:b8:11:2d:9f:c7:f0:87:6e:c3:f6:ba:0a:b5:
51:67:59:95:c0:d2:53:96:00:3a:34:b0:7b:0c:be:
58:38:8b:99:d6:07:7c:b5:d9:b9:b0:cd:84:f6:2b:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D9:02:DF:01:4E:46:76:D3:93:29:18:62:DB:E6:1F:79:F6:A3:38
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:37:5e:80:e4:bd:e8:51:0f:52:4f:31:cd:95:eb:74:4b:
26:5a:66:63:d5:02:b4:d8:c1:37:ec:22:27:68:6d:bc:1b:54:
cb:d6:6c:6e:b9:98:e0:5e:7a:6c:76:97:92:9c:31:52:1f:41:
a1:74:88:ef:72:0a:e8:b8:0e:5a:32:07:25:14:09:11:90:64:
91:9f:58:e0:5a:1a:11:2b:7e:af:42:e4:9b:84:47:93:c2:42:
fc:99:2e:3e:bd:6b:3f:e3:e1:ac:4f:09:ca:91:10:03:e6:b0:
08:46:65:a4:ee:46:30:ea:c7:14:6b:52:98:51:23:a1:4d:b9:
15:4d:80:43:2c:d9:1f:9a:fb:55:22:e4:5b:78:2b:07:f2:be:
66:6f:2e:a0:b0:8e:fc:e1:24:b9:41:c0:6a:36:e8:e6:93:90:
49:df:d1:24:66:5b:c6:7f:52:7a:d6:c2:33:49:ff:ef:e0:4b:
ec:26:49:fc:aa:ef:7b:f2:dd:e4:6c:2e:2b:2a:8d:45:3f:92:
91:38:10:c8:4e:a0:15:24:0d:17:a9:31:23:b5:b2:5e:01:3b:
12:0f:50:1b:dd:08:12:04:65:e5:cd:4c:ca:df:19:9b:8b:94:
f6:91:8e:a6:01:aa:9f:70:66:49:76:d0:a0:12:f1:00:78:40:
d1:e0:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:31 2025 by rpki-client