Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: g5r/u/KgjjichWJ2JnEY/kHXcOCSOxQnrlpjZCYZqHI=
Subject key identifier: D3:64:82:1B:71:93:1B:9D:88:50:B0:50:D5:13:03:A4:BD:AB:F0:B7
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019883553032931DCE0976E67590CFA97B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 161A
Signing time: Thu 07 Aug 2025 07:00:54 +0000
Manifest this update: Thu 07 Aug 2025 07:00:54 +0000
Manifest next update: Fri 08 Aug 2025 07:00:54 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: ejsUtccggEHLMmlw3H/Q8+UXG19FIR+HHM1dzHe4yjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:30:32:93:1d:ce:09:76:e6:75:90:cf:a9:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Aug 7 07:00:54 2025 GMT
Not After : Aug 8 07:00:54 2025 GMT
Subject: CN=d364821b71931b9d8850b050d51303a4bdabf0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:a9:32:7b:73:56:ea:b2:e1:6e:30:9f:be:
eb:3a:4e:8a:05:b8:db:c4:dc:4e:cd:c1:a1:9b:9c:
08:a9:ce:85:14:6f:ee:22:81:7b:b3:7f:f4:e9:59:
aa:5e:41:a2:c5:18:94:5e:ac:5d:7f:06:31:fa:7e:
05:21:5a:68:13:35:36:00:90:71:30:4f:06:89:d6:
f5:4b:9b:2f:8c:3f:b2:16:7e:75:68:3e:ed:c6:b2:
b3:0e:41:02:b4:7c:5f:9c:7d:73:dd:f8:d4:5f:be:
1d:f8:4f:07:1e:d7:64:7a:50:e0:aa:6e:ef:f5:14:
00:f2:75:7d:1c:a6:3b:9f:6e:60:01:ae:4c:a6:48:
96:34:ed:7e:9a:68:cb:23:2f:19:4e:6a:6a:b3:c4:
a4:2f:8b:42:30:25:10:e4:a5:e4:94:10:bb:59:0b:
75:28:74:42:6b:cc:cc:0b:c7:c6:ce:eb:0d:88:f2:
a7:10:87:90:86:a5:f5:d0:80:47:16:3c:5d:70:0c:
e6:11:d8:46:eb:23:3b:13:13:71:b4:98:b1:2c:70:
58:c5:91:f2:11:38:d8:0f:5b:b2:cf:ab:33:59:d7:
a5:e2:c0:0e:3c:38:63:b4:21:d7:94:b0:74:7c:b3:
e2:36:f2:d5:cf:bf:82:a4:b9:1e:30:0e:94:9b:e2:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:82:1B:71:93:1B:9D:88:50:B0:50:D5:13:03:A4:BD:AB:F0:B7
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:23:ca:cb:f9:9e:15:83:7e:14:a6:fe:c9:54:1a:ca:c4:
5b:cf:7e:b7:1c:e2:92:ab:ec:8c:40:0e:ec:eb:11:b1:aa:d0:
11:36:79:7f:a7:f1:e8:61:d0:67:b7:0b:8d:6c:f6:30:b1:21:
f3:a6:48:49:57:d5:4a:1a:2e:27:30:62:a8:ef:7a:07:c1:21:
dc:49:73:49:c2:6f:04:fb:36:47:2f:6c:41:36:35:98:f7:39:
a8:4a:5f:65:02:f5:c1:99:14:a2:d9:d7:dc:d7:62:da:9f:ce:
ec:f7:0f:09:06:84:fd:7d:05:a7:14:19:2a:f3:80:18:7f:e5:
21:ae:5f:06:5d:64:bf:31:ac:57:7f:6a:c0:f3:93:b5:75:84:
1d:89:49:d4:04:0f:e8:b0:d4:31:8c:44:1d:c0:c5:41:ad:18:
85:f3:76:41:19:89:38:c2:22:47:39:b7:18:54:7e:83:c3:45:
85:2c:14:a9:8f:63:b2:36:9e:3a:22:ee:4f:74:68:be:d1:1e:
5d:e3:aa:56:69:7b:f8:4c:2f:a9:87:b7:08:db:ea:ff:aa:2c:
1b:de:71:8a:1f:0c:14:a8:de:cb:91:9d:43:5c:fa:95:d9:10:
76:d4:19:61:55:25:61:5f:8a:47:19:60:6c:ea:7c:fb:1b:63:
44:18:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:50:33 2025 by rpki-client