Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: y/84PxMH1PVbXsHHD/WReoRBdHyCzXC+4mwEQBKSy6w=
Subject key identifier: 61:A4:B4:20:84:96:B7:93:27:4E:B8:E1:55:6E:BE:75:C7:27:09:24
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 0198A0BAB5FE8A27675E6CFCD103D8CE7751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 162C
Signing time: Wed 13 Aug 2025 00:00:47 +0000
Manifest this update: Wed 13 Aug 2025 00:00:47 +0000
Manifest next update: Thu 14 Aug 2025 00:00:47 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: NDbNRk3nARL+x2j8BusgkqWwxivtneIlCuk9TGCBhfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:b5:fe:8a:27:67:5e:6c:fc:d1:03:d8:ce:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Aug 13 00:00:47 2025 GMT
Not After : Aug 14 00:00:47 2025 GMT
Subject: CN=61a4b4208496b793274eb8e1556ebe75c7270924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:6f:53:36:1d:b6:6f:c3:f7:37:bc:b8:04:
37:4b:f7:36:76:ed:c1:98:d1:c8:6f:4d:3e:b2:54:
70:e8:86:85:ab:37:26:68:58:80:a2:13:fa:8b:30:
2b:9e:6b:59:b7:b2:11:33:31:27:ae:e2:d1:26:ec:
a9:bf:ca:98:2f:00:99:83:76:7e:78:98:db:8c:7a:
ae:3d:90:8d:aa:cc:6f:72:3f:0f:96:b9:2c:7a:7b:
0b:da:15:fc:cb:fc:82:b8:68:7d:54:ec:a8:7e:13:
80:16:ee:4f:62:7d:fb:1e:78:db:c9:7a:56:0e:75:
b0:6c:c2:91:54:66:ab:f4:ee:df:dd:8f:4b:b8:f7:
66:5a:72:ab:39:f6:73:76:ee:67:47:d3:ef:e1:fc:
f9:d9:d4:32:b1:32:2f:e3:7b:67:d0:4b:13:9d:8a:
1e:ef:58:7b:48:92:93:89:49:fa:91:4b:d1:64:c9:
55:1a:e9:8b:ad:0a:96:93:07:9a:eb:31:87:d3:26:
cf:7b:31:54:7d:9a:a8:9a:61:1e:e4:78:18:2a:bf:
cd:40:1a:d1:3f:31:a5:0a:ad:30:e4:a5:97:40:b4:
5b:30:8e:e2:e4:13:e7:44:5f:38:e5:ce:78:29:6e:
86:30:a5:ec:82:f1:41:3b:e8:b6:9d:11:d3:bf:c7:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:B4:20:84:96:B7:93:27:4E:B8:E1:55:6E:BE:75:C7:27:09:24
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:9f:0c:f1:57:c0:73:c2:f8:8c:70:81:2c:1b:c5:f0:db:
a5:26:b3:49:97:32:da:65:0a:5b:9b:3b:c0:0c:1a:52:41:24:
26:3c:de:bf:84:20:60:ce:c0:81:5b:9f:71:0d:13:a5:53:8b:
40:6f:8f:0e:ea:a1:b3:d0:d4:d4:4c:51:5f:3b:f0:6b:f5:b4:
78:c2:c5:3e:e0:1c:51:76:ff:59:94:8a:31:db:88:a6:d1:c2:
6b:62:a1:95:87:a2:e0:f7:8d:66:82:1a:8b:a1:aa:73:c4:bc:
3f:c6:14:83:08:1f:52:8c:3c:b9:4e:42:6a:cf:91:d1:e6:2d:
b5:1b:2f:71:21:5f:9d:b7:0f:bb:49:9a:81:5c:a7:72:9f:a7:
06:62:55:81:04:ee:05:f4:5b:26:4c:e4:d6:35:46:48:4a:88:
86:e4:e1:a0:36:66:01:2b:5f:3b:cf:66:d1:50:ff:da:f1:aa:
5b:44:d1:61:f2:a6:eb:25:f4:56:77:b4:85:4d:65:c1:24:48:
2a:d2:86:28:5a:9a:05:e2:5c:fb:5c:2d:32:e9:52:6c:09:53:
31:2e:15:6d:63:64:7f:02:1e:9f:e5:13:0c:70:ae:c6:41:f4:
08:b4:ab:2d:e4:51:fe:a1:9f:cd:54:c5:a4:68:0a:a2:88:cc:
8f:ca:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:02 2025 by rpki-client