Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: DMI5S6Ajg28cRIY5CV+KfYoa19i/j43cqZQSbfI/UTE=
Subject key identifier: 36:93:B9:74:37:A2:72:CF:3D:B3:FD:90:F3:B7:A9:05:7F:7C:6A:62
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 01978846BF2EB4CB3CDC91C0FF1A61907111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 159A
Signing time: Thu 19 Jun 2025 13:00:27 +0000
Manifest this update: Thu 19 Jun 2025 13:00:27 +0000
Manifest next update: Fri 20 Jun 2025 13:00:27 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: xRnEkH/I21LcvLjdP2pHPUhZEH8mpHiYXU37YcmzKwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:bf:2e:b4:cb:3c:dc:91:c0:ff:1a:61:90:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Jun 19 13:00:27 2025 GMT
Not After : Jun 20 13:00:27 2025 GMT
Subject: CN=3693b97437a272cf3db3fd90f3b7a9057f7c6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:af:69:1b:cf:bc:d1:27:6c:be:15:2e:27:
be:c4:d6:17:05:3b:25:b9:f8:87:13:3e:6b:10:bb:
03:b2:9b:9f:88:f5:73:b2:14:30:30:72:af:f4:d0:
25:82:67:5c:29:ab:38:dd:20:f6:77:8b:9c:8c:6c:
a8:f1:91:2a:9f:a2:f1:6e:99:67:bd:49:30:8e:2c:
66:78:b7:ad:c5:83:5d:d8:a4:fc:61:d2:85:df:dc:
f9:2e:dd:07:22:01:51:d7:c0:58:f4:87:7d:04:38:
31:d6:d1:38:04:ff:86:36:3b:64:b4:1a:68:44:9b:
e5:18:3c:2f:23:df:71:a0:d9:6b:f4:e5:3c:3d:4a:
a6:9b:60:b7:2f:f0:e2:6c:8b:64:62:43:4e:dd:1e:
16:ec:8e:a9:80:05:bb:e8:43:4e:af:0d:91:3f:0d:
95:12:a1:5d:30:a0:a6:ed:03:4e:20:71:51:f1:20:
cb:cb:53:a7:45:77:89:19:c2:a7:18:62:20:c9:1c:
b7:21:6f:de:03:5a:3b:1d:92:9b:ea:d5:d9:d3:34:
0f:81:5a:bc:59:1e:7d:54:54:31:3f:88:60:4e:33:
bb:f8:bd:2f:db:a4:ed:77:1c:21:6c:bc:7b:ba:7d:
e4:e8:2a:fd:fe:49:d3:ec:fb:9d:6a:81:d5:63:a5:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:B9:74:37:A2:72:CF:3D:B3:FD:90:F3:B7:A9:05:7F:7C:6A:62
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:50:66:ec:74:b8:38:da:b7:a1:f9:70:d4:ac:22:6b:a9:2c:
c3:94:81:f6:3b:40:83:6b:5b:97:b2:7e:01:a2:33:3d:f6:2b:
c8:ab:e9:72:a8:3d:21:4b:3e:c7:a6:73:b6:66:0b:6c:1c:86:
79:fa:27:e8:8e:1b:25:c8:77:b7:f1:c4:50:cc:29:64:06:91:
34:e8:43:58:49:00:fb:79:47:3c:ff:6e:55:22:cd:9e:a2:25:
36:92:5e:c4:b7:e8:da:c1:e0:bb:8b:5f:68:8b:c2:ac:e7:f2:
54:84:1c:9e:51:3b:1c:87:36:8a:bf:f4:4d:1a:50:e8:7f:6a:
f0:dc:0f:c4:fb:24:60:c4:76:d3:4b:8b:87:1d:8a:cd:18:b7:
6c:62:46:6c:9f:a9:40:83:11:b0:9a:61:a7:3b:8f:e9:54:97:
06:44:b8:0b:36:52:15:e2:4f:ff:4b:34:17:df:05:ad:7e:0d:
6e:b0:aa:f9:25:77:15:87:64:ea:0c:08:65:db:b6:45:36:f9:
d8:aa:46:33:7c:55:f8:04:ad:2b:37:be:81:41:8d:c0:ca:e0:
ba:f0:53:80:9e:42:34:14:18:42:3e:e7:6b:1b:a7:4b:95:51:
c8:d5:96:d5:4e:81:8b:df:f1:c6:96:5f:2e:e1:4a:72:1e:2d:
63:6f:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:53:14 2025 by rpki-client