Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: q27ZA+7AT2WIyMTd+gjCt83VrRJ9CK6THldZjTZBj8Y=
Subject key identifier: B1:25:D6:14:2A:93:56:39:F0:D4:5B:11:A2:F3:8B:77:15:5D:FF:23
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019882E76D266100E044015012C9296CC86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0DE7
Signing time: Thu 07 Aug 2025 05:01:01 +0000
Manifest this update: Thu 07 Aug 2025 05:01:01 +0000
Manifest next update: Fri 08 Aug 2025 05:01:01 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 141WCWvPT2UBonLperdWlWFSU+iHztTJ+eVQDRR4MPc=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:6d:26:61:00:e0:44:01:50:12:c9:29:6c:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Aug 7 05:01:01 2025 GMT
Not After : Aug 8 05:01:01 2025 GMT
Subject: CN=b125d6142a935639f0d45b11a2f38b77155dff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:00:a3:a2:5a:16:5f:16:97:da:c5:8f:5c:
bd:98:37:8c:21:92:9f:86:24:f7:ee:05:5d:b5:27:
b7:08:e7:ba:7d:f7:96:e5:9e:1c:91:5c:e8:2d:07:
8e:81:b1:65:71:2e:00:a4:08:1b:5a:bf:52:c1:f3:
eb:06:78:62:fb:85:63:a3:df:a3:61:2a:c2:06:c8:
db:a9:14:07:ca:d0:b9:ac:d5:74:50:a3:08:3e:12:
a5:0b:66:c1:e2:cc:69:33:54:2f:1c:86:94:81:98:
28:31:4c:0d:52:70:5f:65:3c:e9:2b:54:96:5b:71:
06:ba:72:2b:07:1f:00:d0:2a:e6:8f:61:64:1f:c5:
06:92:7b:aa:7a:75:76:ea:91:4c:b8:e2:95:d8:b0:
ac:0d:35:32:b9:a4:c6:89:84:af:93:18:b1:5f:14:
e0:b0:cf:61:c7:c7:46:83:4a:bd:7f:9e:d0:b9:f9:
ee:84:cb:7b:31:ae:09:09:86:76:57:6e:77:66:d9:
ac:8e:50:6e:98:11:e3:16:8f:42:8e:3d:80:0c:5f:
9d:36:f1:cf:22:95:c6:ea:73:84:79:d6:25:04:58:
e0:eb:2e:3f:ef:15:31:2e:fd:8c:50:94:fe:b3:e7:
f3:a7:1c:ac:d9:6b:5f:07:cf:b8:14:08:ae:68:14:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:D6:14:2A:93:56:39:F0:D4:5B:11:A2:F3:8B:77:15:5D:FF:23
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d0:03:65:86:6b:16:56:e8:66:07:36:26:cf:34:a4:d1:b3:
ac:2e:8f:cf:21:31:fa:86:f5:0f:ff:d1:83:d6:1e:69:30:c0:
78:1b:16:24:c2:54:83:2d:83:cf:1c:8e:41:4e:dd:62:6d:3a:
08:7f:b8:a6:36:62:ff:fa:0d:10:3a:11:7d:25:d0:b2:ce:c7:
01:c0:b6:24:eb:3a:ca:45:3e:67:46:f6:0d:26:eb:97:0c:aa:
ae:d7:22:80:0b:d6:e0:6f:37:43:49:1c:88:e7:f8:f8:5b:51:
7f:a8:0b:d4:78:73:5c:a9:b7:54:b0:26:96:5d:de:3d:6a:9c:
51:6e:6b:77:fc:09:5d:29:eb:4e:6e:22:1e:38:d1:3c:c3:82:
16:e5:2e:5d:f5:35:95:60:5c:96:94:33:b3:ee:33:93:72:d9:
bd:aa:7e:bc:d2:0a:fa:d6:bb:e0:0d:6d:c4:7a:4b:61:2a:ea:
ee:6e:ff:4a:9a:4f:57:97:57:d3:e4:6e:88:5b:8e:9b:c7:84:
e0:82:95:28:5b:20:84:d9:20:57:f7:7b:e3:f9:1c:57:8a:72:
d4:64:67:f6:92:7b:6e:13:6f:5e:88:01:8e:c8:ff:4c:92:68:
a9:c4:8e:39:aa:43:5b:fc:87:af:2e:c1:c3:cb:a4:20:27:55:
f6:a6:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:45:07 2025 by rpki-client