Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft
File: kbDB4HajRpZoEluN05XzBN-i55Q.mft (raw, json)
Hash identifier: fxmhPWyyTfOKMfiPHiBL8pUQTB07SYV7HalG7Mq7uxs=
Subject key identifier: 0E:BB:89:1D:0E:17:08:B2:67:0C:82:10:29:F1:B8:C5:D5:95:DA:EF
Authority key identifier: 91:B0:C1:E0:76:A3:46:96:68:12:5B:8D:D3:95:F3:04:DF:A2:E7:94
Certificate issuer: /CN=91b0c1e076a3469668125b8dd395f304dfa2e794
Certificate serial: 01988166E13CF398EB3C4CC8E4D3FA76F187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbDB4HajRpZoEluN05XzBN-i55Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft
Manifest number: 1A
Signing time: Wed 06 Aug 2025 22:00:59 +0000
Manifest this update: Wed 06 Aug 2025 22:00:59 +0000
Manifest next update: Thu 07 Aug 2025 22:00:59 +0000
Files and hashes: 1: kbDB4HajRpZoEluN05XzBN-i55Q.crl (hash: En8pVR3qPK5jVkEvIqdQIvmxerP7YYLuocCsknhdXvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbDB4HajRpZoEluN05XzBN-i55Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:e1:3c:f3:98:eb:3c:4c:c8:e4:d3:fa:76:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b0c1e076a3469668125b8dd395f304dfa2e794
Validity
Not Before: Aug 6 22:00:59 2025 GMT
Not After : Aug 7 22:00:59 2025 GMT
Subject: CN=0ebb891d0e1708b2670c821029f1b8c5d595daef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:0e:68:a1:3a:65:43:aa:8e:53:99:07:e5:
ae:05:c1:5d:27:f4:9d:77:15:b4:f0:fb:44:5b:99:
8e:df:d4:97:09:0f:9e:7a:6f:bc:86:9a:36:67:0c:
9e:b1:2c:53:31:3c:c9:35:2c:39:08:39:d5:15:42:
36:d1:52:c4:40:34:4c:2d:2a:0f:d8:9a:1d:97:96:
3a:64:d9:f0:6d:d8:c9:57:50:34:19:0f:32:f6:3b:
fa:86:9f:06:af:36:d4:64:ba:79:c5:1e:21:9f:b1:
56:d9:ed:55:66:13:8f:28:c2:7b:94:c0:99:fe:db:
0e:a7:e1:7b:c5:b5:4e:81:b8:c4:5b:21:d6:92:f7:
e6:2a:26:e9:4f:76:64:24:98:e4:e0:c9:de:d7:76:
97:ca:d0:d7:6a:7a:69:7f:32:87:d4:7d:13:c1:22:
51:6a:9d:5b:ec:d0:c7:98:aa:29:96:9e:e3:82:e8:
78:b0:32:2e:27:b4:24:44:b6:31:99:ef:c0:c9:94:
36:7e:c0:5b:7f:35:06:85:1e:97:3b:35:9d:ac:ae:
54:18:9b:5d:e9:21:dd:a5:c7:1d:76:fa:25:39:65:
9d:cc:46:cb:c0:4c:9a:0b:2b:97:4c:b3:36:13:40:
33:76:c9:7c:c9:ce:76:cc:33:92:c2:63:d4:35:50:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BB:89:1D:0E:17:08:B2:67:0C:82:10:29:F1:B8:C5:D5:95:DA:EF
X509v3 Authority Key Identifier:
keyid:91:B0:C1:E0:76:A3:46:96:68:12:5B:8D:D3:95:F3:04:DF:A2:E7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbDB4HajRpZoEluN05XzBN-i55Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/75c964-354e-46a3-b39e-ed82379cfa32/1/kbDB4HajRpZoEluN05XzBN-i55Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2f:92:7c:36:75:43:3f:59:29:95:f8:16:8f:ee:12:fa:a8:
ed:2f:6a:6a:a8:76:78:e9:18:9c:80:a4:43:94:f3:d2:8d:2b:
4d:35:20:82:e2:fd:08:0a:97:20:8b:d7:da:d8:35:ae:59:1e:
bd:80:7e:2d:a2:f2:f2:0c:82:a5:a3:9a:a5:50:52:92:29:d6:
bc:c9:1c:74:3e:1f:8c:44:eb:a9:21:14:b1:a2:a7:72:ad:f0:
5e:b2:7d:35:36:8f:0f:73:a3:89:ab:49:82:ee:37:26:72:fc:
80:a6:93:20:ad:9a:9a:09:f8:24:41:44:a5:bd:0e:d8:95:2f:
74:b2:aa:6a:1c:d7:e7:d0:7e:94:db:75:58:40:60:4f:fe:ba:
32:db:2b:8c:01:cc:53:b3:62:a5:ae:f9:52:f9:3c:c2:b9:62:
df:9e:04:7f:4a:ea:28:44:66:d4:81:65:7d:da:06:99:9a:b7:
2c:64:53:21:4f:d9:7a:39:11:9b:b4:22:2f:5e:b8:78:9d:43:
ca:ab:ad:4e:30:10:17:c1:e9:a1:d2:4c:b3:80:ab:df:c0:fc:
e0:4c:dc:01:b4:f7:b0:d4:93:b2:a4:1c:13:e7:6c:cc:d7:f1:
cf:38:e7:35:e8:de:9b:a8:62:8a:15:a2:84:b7:2a:60:a5:de:
81:0c:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:00 2025 by rpki-client