Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: mlbGbSSczJN+OqS+/Pa4Tb9G6OraczOA3oDxJfuLK8M=
Subject key identifier: 4C:77:90:F7:77:8D:94:44:6D:57:33:B7:4C:BB:92:59:9D:9A:CC:8D
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01988C5870E5430982C71BDC7B5F516EA780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0A23
Signing time: Sat 09 Aug 2025 01:01:02 +0000
Manifest this update: Sat 09 Aug 2025 01:01:02 +0000
Manifest next update: Sun 10 Aug 2025 01:01:02 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: vPdW4h3vtsNRiADhpd9FRwMrv9mujdcOXgK1TabLaR4=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:70:e5:43:09:82:c7:1b:dc:7b:5f:51:6e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Aug 9 01:01:02 2025 GMT
Not After : Aug 10 01:01:02 2025 GMT
Subject: CN=4c7790f7778d94446d5733b74cbb92599d9acc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:24:8d:e6:82:f2:44:7f:f3:8c:8c:e6:35:
4c:ce:67:b6:62:c5:85:43:bc:64:ba:20:ad:45:93:
8c:0c:52:67:60:69:8c:d8:3b:60:50:39:2f:57:68:
55:f0:04:e8:27:84:fc:14:c1:f0:b1:4a:42:0c:c3:
d4:b6:ed:7f:81:d2:e4:35:57:01:d7:1e:61:8d:f7:
25:87:39:6e:b5:15:5a:cf:b3:eb:b1:b8:68:0c:33:
1a:dd:f5:2b:3e:23:e7:16:30:90:c7:94:8b:55:64:
96:9e:70:fe:b9:92:79:71:0c:36:77:36:3f:cd:09:
fc:99:c7:9f:21:a6:89:02:7a:59:0f:bb:7b:33:9b:
24:8e:c8:d3:e3:40:81:48:6c:39:a4:ff:54:a5:90:
57:9d:0b:79:16:2a:46:a0:08:07:d6:a4:f3:f1:8d:
1a:99:42:50:4b:83:7a:9b:62:5f:d7:43:5e:77:01:
e7:0d:73:47:ab:4c:1c:04:bc:29:e8:32:fc:f5:cd:
06:67:18:5d:d9:15:51:14:58:88:ab:18:5d:74:c4:
a3:73:a6:18:ec:a0:3f:86:69:05:84:d7:a2:02:8a:
6c:c0:83:f1:f2:0b:79:e9:26:4f:37:ab:25:e9:e2:
78:9b:94:a0:94:5b:e4:52:e3:af:71:f3:5a:29:6d:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:90:F7:77:8D:94:44:6D:57:33:B7:4C:BB:92:59:9D:9A:CC:8D
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:50:0a:04:0f:d6:67:52:93:35:11:58:94:01:be:0a:d7:
3a:5c:a8:fe:fd:d6:8c:1d:0e:3d:ee:48:37:3d:e9:de:c5:29:
86:70:76:5a:59:ac:33:39:e9:24:da:03:c7:6e:77:0e:95:75:
6b:61:bf:7d:c6:1d:a4:6d:b2:2b:bd:dc:5f:c0:50:6a:f2:18:
fb:da:4a:cf:13:3e:cc:04:b1:85:4b:71:30:58:d7:4d:9c:49:
01:06:30:f6:19:a5:33:76:ad:5a:6d:a5:c8:87:c4:d9:00:2e:
cc:e0:4f:23:58:46:f7:ac:17:6f:bf:7b:2f:61:bf:d8:ed:56:
a4:7a:05:07:03:da:a2:05:c8:d3:80:27:5b:61:0c:1d:d8:cb:
f8:9a:85:d5:78:a2:a5:c8:0a:81:a9:92:ce:a9:cd:01:4e:82:
df:cd:05:d4:b8:72:67:56:f4:91:69:21:ae:56:2c:b9:bc:88:
36:a5:d5:b0:dc:43:75:07:a8:65:a7:cf:5c:aa:a1:0e:56:b0:
03:a9:82:e8:81:0f:ec:fd:04:00:67:2f:70:75:69:f3:bf:60:
ca:01:da:6d:bd:7a:b4:62:e2:fa:ac:77:90:93:9d:ce:a9:b4:
3b:70:4f:0e:2b:f5:de:3e:de:98:e0:5d:76:97:5a:23:2c:c6:
64:5b:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:27 2025 by rpki-client