Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: J0MbTt9U8Xm8hhNSzJDDlu7zZByt5UsozmVPTo33RD8=
Subject key identifier: D2:69:FB:94:76:18:E2:50:8E:23:60:AE:A8:1D:E9:16:2A:06:8E:10
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 0198A083CCB44A1E3B2C13870083E9CE7BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 02FA
Signing time: Tue 12 Aug 2025 23:00:48 +0000
Manifest this update: Tue 12 Aug 2025 23:00:48 +0000
Manifest next update: Wed 13 Aug 2025 23:00:48 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: +GkvePqN45yKwMErizAe3su2Wz0+4l8CwT8sFzDzgq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:cc:b4:4a:1e:3b:2c:13:87:00:83:e9:ce:7b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Aug 12 23:00:48 2025 GMT
Not After : Aug 13 23:00:48 2025 GMT
Subject: CN=d269fb947618e2508e2360aea81de9162a068e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:63:f9:a9:a2:a3:40:79:79:ac:ba:16:77:
8e:bb:20:3c:68:c4:f7:26:4d:b2:9e:55:57:ee:45:
11:0a:9c:56:bf:55:60:52:5a:fe:4d:b7:89:6d:d6:
06:ff:9e:40:ba:2c:e3:35:d3:c7:bf:91:af:35:b8:
ce:89:96:8c:4c:c4:10:8b:97:d4:d7:e4:68:05:b1:
1b:8f:a4:5c:72:77:df:b2:1d:2a:48:8d:62:ea:da:
23:eb:65:b3:36:48:83:15:7d:21:48:4f:bc:a5:f4:
8f:56:c1:d2:41:ba:08:91:c6:2b:62:5a:4f:6d:72:
26:10:26:58:6f:c4:16:25:45:be:94:7d:ad:30:b7:
8f:5c:26:70:c1:3f:a3:02:34:a7:5f:a9:c7:b4:85:
cd:cc:f3:7a:f8:ac:76:a5:d4:09:ab:df:a2:c2:4b:
78:b4:85:cd:42:17:96:a5:b8:86:8e:3a:1e:26:6a:
d1:0f:20:c5:80:2e:15:f1:5f:74:82:ef:e6:d0:4a:
3a:4c:85:22:a6:30:c4:1e:d9:38:3f:20:63:fa:26:
77:c3:42:a7:db:14:23:65:61:41:00:c6:63:37:4f:
8b:c9:d7:2c:74:8d:52:e5:34:97:a7:aa:42:dd:13:
94:fd:4e:94:ac:ff:53:8f:bc:e1:83:9d:0b:ab:a4:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:FB:94:76:18:E2:50:8E:23:60:AE:A8:1D:E9:16:2A:06:8E:10
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:45:9f:eb:43:dd:d5:43:4b:08:ee:78:b0:fe:c8:c0:9a:bb:
ea:4a:64:e5:0f:db:8c:c8:fe:7c:00:ef:51:b6:ff:36:4b:fe:
22:31:fa:91:56:b3:68:2f:b0:5b:1c:69:83:4e:b9:f4:aa:a1:
2d:af:27:6e:c9:ca:a8:40:05:6c:4f:b6:e9:d6:d2:fc:ca:a9:
c0:56:8d:4f:16:cb:0a:16:10:ec:03:28:99:e8:35:4e:ba:1f:
1a:9e:25:53:69:85:0c:a4:63:f3:2c:f6:94:7d:fa:5f:3d:63:
b4:43:0f:77:76:07:ee:b6:76:38:20:07:5c:a5:24:17:85:95:
2d:db:6b:91:a6:29:e9:2c:f1:06:48:bc:e0:6d:3b:dc:12:43:
3c:90:b9:08:f2:d1:0d:47:31:0b:25:32:fa:c7:ad:24:d2:97:
5c:fa:6e:0e:b8:fe:86:38:2c:be:a7:81:89:b0:af:68:ef:15:
a4:c2:e0:19:c0:39:98:3c:dd:09:82:0f:6d:b3:23:2f:48:00:
4f:f9:a0:9d:c8:ea:04:70:3f:49:ca:df:fc:ae:b7:f6:f4:e9:
91:2c:36:16:6f:55:54:33:c1:24:4a:05:5a:d3:38:b4:c5:51:
f3:4b:6a:50:fc:cc:ae:8e:65:ce:e0:75:ba:a6:be:9c:5f:b5:
ba:e0:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:40 2025 by rpki-client