Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: DcJkqMVvzYOUPEEs/xWuHIdahMHRvzfphP9WTXdu07A=
Subject key identifier: 2E:6F:CE:FF:99:DB:96:A7:7A:E0:87:4A:1F:5D:4D:9E:3F:2A:35:30
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 019881D55514008AE00851D47EA6FE9139F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0C9A
Signing time: Thu 07 Aug 2025 00:01:38 +0000
Manifest this update: Thu 07 Aug 2025 00:01:38 +0000
Manifest next update: Fri 08 Aug 2025 00:01:38 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: Ngiv7bUIhdBFQviCV8PT12cYUjGjS7q1R4rvijGIKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:55:14:00:8a:e0:08:51:d4:7e:a6:fe:91:39:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Aug 7 00:01:38 2025 GMT
Not After : Aug 8 00:01:38 2025 GMT
Subject: CN=2e6fceff99db96a77ae0874a1f5d4d9e3f2a3530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fd:0f:2c:33:29:e2:5f:2d:48:a2:50:a8:9d:
4b:b7:d1:32:e7:1d:be:f5:f9:5e:71:b4:a9:0b:93:
5c:e6:62:66:80:d1:45:04:a4:d9:40:81:a2:d4:60:
d4:cb:0b:ca:83:5d:d7:fa:e6:56:b9:da:7d:67:6b:
dc:b3:5e:cb:07:34:45:bf:bd:88:92:c0:3b:c9:a0:
5c:c0:17:7e:d9:bd:52:85:95:5b:69:16:12:19:03:
68:51:7f:74:df:86:8c:90:a5:0c:8e:8d:83:0e:56:
f6:15:83:2f:74:66:e7:03:f4:e5:f3:67:13:12:07:
30:67:c6:b6:76:db:f7:d4:5f:9b:e2:f0:34:66:c5:
1b:1d:95:3a:52:bf:68:25:88:05:6a:21:e1:92:a6:
97:ba:3b:5a:85:52:88:a7:ca:6f:56:7d:ec:df:f7:
f4:3d:77:1d:a8:99:c2:b5:2a:29:9c:70:59:dc:07:
25:4a:79:0e:3e:c9:f5:12:b4:c6:a0:7a:c0:e1:ac:
c8:99:90:f2:14:e5:95:72:51:43:3b:d1:6a:f9:a6:
f6:fc:03:93:9f:00:de:10:98:c6:06:8f:c1:07:97:
c0:66:d5:a5:9a:da:41:84:61:f5:cf:6e:63:40:31:
3c:22:b8:88:95:6f:80:0c:f7:ba:40:80:1c:c2:37:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:CE:FF:99:DB:96:A7:7A:E0:87:4A:1F:5D:4D:9E:3F:2A:35:30
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:ea:01:80:e3:af:84:3d:26:59:c4:3e:42:2f:02:1e:f5:
0e:18:ca:50:82:06:35:58:15:98:9e:c1:0f:de:8b:6b:d3:39:
79:ca:4d:e0:25:1c:45:e1:d4:eb:ea:6e:89:f6:80:24:46:38:
23:b2:24:15:8a:c1:cd:6f:4e:ee:d9:ba:d1:e7:8c:52:54:9c:
51:af:12:eb:0a:af:4e:3c:b4:cd:a3:13:21:5d:60:ff:01:0b:
95:92:05:51:eb:82:8f:09:d6:2b:21:62:bb:f1:d4:2f:e0:ad:
31:55:03:4a:77:5e:b3:db:38:1c:22:3f:fb:98:ae:9b:4f:4a:
61:b2:82:5d:61:c8:6b:ed:9e:d2:a5:a0:8d:05:62:90:57:24:
f1:db:bd:45:ff:1d:12:59:32:8d:52:48:6d:d7:f3:7f:2b:d0:
42:81:7d:99:8d:30:df:c3:6d:6d:52:b9:bc:0d:56:21:62:6a:
6b:89:a8:3d:08:e9:22:b6:80:61:6e:2e:30:e5:47:f5:2c:2e:
8b:ce:8d:bd:10:ea:d3:ea:ae:b1:2e:c4:55:e5:0d:d1:2f:8a:
37:a6:ed:91:1e:2d:86:a1:df:b7:57:6e:5e:ca:99:0e:59:9f:
bb:c6:7b:4e:35:72:bd:7b:a0:1b:03:05:ca:ba:dd:14:03:1a:
da:74:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:02 2025 by rpki-client