Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: +KZVJX5fBRcYjcg2V3KsweEtSn8x1XIeknpOruGvUZ8=
Subject key identifier: 8C:69:B3:78:9D:A5:8E:CD:D9:86:3D:C3:67:2F:BA:FE:94:2D:15:12
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 01988C58934EB8BB086124218F1A79C06728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 07CB
Signing time: Sat 09 Aug 2025 01:01:11 +0000
Manifest this update: Sat 09 Aug 2025 01:01:11 +0000
Manifest next update: Sun 10 Aug 2025 01:01:11 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: FM6VAVlcg6lIefXQxZsmfRJj/8MnpdwzxRuhwb40AA0=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:93:4e:b8:bb:08:61:24:21:8f:1a:79:c0:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Aug 9 01:01:11 2025 GMT
Not After : Aug 10 01:01:11 2025 GMT
Subject: CN=8c69b3789da58ecdd9863dc3672fbafe942d1512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:b9:0f:51:52:9b:f1:2a:cd:ca:ea:53:81:
65:0c:40:fa:1c:d0:54:f6:69:25:84:64:0b:db:b2:
4f:e9:4b:89:24:96:fd:0e:c4:7b:a2:0e:fc:3b:d1:
64:71:a5:63:03:4e:3f:fb:51:07:fe:53:e5:80:3c:
87:23:88:57:7e:82:14:c8:e2:d3:71:34:93:a4:fb:
76:b4:8e:55:4d:ba:64:27:86:8f:1e:ea:19:8c:fe:
80:b0:79:e2:5f:55:58:aa:8d:fa:f3:bb:98:1b:c5:
08:b4:c2:f5:a3:e7:0d:29:eb:64:d7:b1:ad:c4:e3:
31:01:e1:db:2c:3b:f6:4e:07:12:2d:98:fd:55:04:
35:b0:59:87:86:10:b8:f1:58:25:fc:8e:52:00:01:
a1:80:b2:8c:21:51:d0:22:53:2e:8e:f0:4c:22:b7:
cc:56:c1:c2:af:2a:2f:3a:6a:3e:e4:cb:cb:a8:70:
a3:e7:8b:5c:d8:2b:48:ad:de:35:6c:29:81:24:39:
51:65:ab:ce:a4:5d:2a:b3:6f:cc:c9:92:28:4e:b4:
63:90:d8:33:ad:6c:37:30:c3:bb:b1:5f:ea:7b:32:
98:dd:66:6a:a1:ef:ac:a1:b8:08:34:45:b4:1c:6b:
5e:10:e8:17:e1:c4:c6:78:f9:53:76:9e:4f:10:1b:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:B3:78:9D:A5:8E:CD:D9:86:3D:C3:67:2F:BA:FE:94:2D:15:12
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:f8:a0:45:13:c0:d1:7b:4b:e2:bc:09:11:0d:c6:20:a0:
50:7f:40:c3:fb:a4:61:1e:f3:bd:1c:cc:72:9f:b6:bc:51:4a:
85:c4:34:8b:2b:7a:28:58:61:ca:7d:c2:b4:1f:f5:db:9a:34:
97:32:29:94:5f:ec:91:b2:d0:90:be:6d:e8:dc:89:be:f3:81:
65:aa:b0:68:01:5f:8c:d5:ac:26:7c:85:a8:89:d0:1f:cc:59:
3e:73:82:48:c8:70:0b:81:4a:20:10:98:f8:92:2b:21:8a:7d:
8d:c6:10:59:e9:0c:bb:fd:09:5b:76:6d:48:9a:f6:0d:da:6e:
2f:18:ca:c5:d4:28:f9:50:0f:b2:9b:d1:5b:08:f3:6f:3e:ce:
33:75:e5:20:5a:15:72:a1:33:c2:c6:a9:50:df:38:d6:e7:7e:
d7:a8:86:b5:ae:a8:6e:68:95:3e:c7:76:2a:31:d6:08:71:d3:
f9:05:c4:0e:70:d3:5a:8e:fb:22:10:03:ac:56:67:bf:17:05:
42:91:c2:65:25:87:e2:19:9e:48:07:cc:89:e0:a1:a5:eb:7c:
2c:82:0d:6c:fb:13:5e:55:d8:9e:51:10:b4:a6:af:3a:f0:bf:
c3:6a:eb:46:48:38:5d:46:ca:d4:4f:6d:f8:4d:ff:0f:e3:b7:
2c:e8:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:26 2025 by rpki-client