Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: g/2Gp/jrHmhehrmPLFobqs8oOcNtGFoFf8UWPmoF+zE=
Subject key identifier: B4:F5:28:0E:BD:F3:F7:8B:47:E7:8E:C5:EA:44:92:3A:A4:4D:41:2C
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 01976D3DB2F9DA5C6F9F897AF564A376ECCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:00:49 +0000
Manifest this update: Sat 14 Jun 2025 07:00:49 +0000
Manifest next update: Sun 15 Jun 2025 07:00:49 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: hHM0rEr8CPVpP6PTxfw8KKf4J+Q52yJitnQnql3A87M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b2:f9:da:5c:6f:9f:89:7a:f5:64:a3:76:ec:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Jun 14 07:00:49 2025 GMT
Not After : Jun 15 07:00:49 2025 GMT
Subject: CN=b4f5280ebdf3f78b47e78ec5ea44923aa44d412c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:97:9d:ba:de:6a:d8:d6:83:da:8a:7d:e1:
62:74:76:d9:11:6d:e7:f5:fd:f6:cd:06:b0:c8:f4:
31:18:0a:29:1c:fe:a1:43:2a:19:ed:5c:72:bd:a4:
22:45:1d:d4:a0:59:43:52:6a:80:c9:8d:83:96:54:
60:ca:ac:3d:2e:bb:4e:2e:5d:a9:35:5c:3e:34:12:
de:61:e9:25:d3:65:69:12:45:1b:95:53:95:5e:f8:
41:e3:b7:70:a3:af:1c:3d:83:06:52:da:2d:05:1d:
21:3e:2f:03:e7:2d:3b:60:d1:53:e0:70:77:1d:91:
ef:61:f5:9f:98:21:e1:19:fb:39:1c:f6:e8:e5:22:
aa:13:0c:dc:c6:57:59:b3:e2:a5:0f:9e:c9:b7:91:
f3:33:2c:8d:bf:fb:21:60:ef:b2:45:69:65:4f:92:
01:f9:53:42:bf:76:77:79:80:13:69:bb:0e:fa:ec:
01:08:d5:f0:12:9c:8d:54:81:35:e6:bc:fb:b3:04:
a6:ae:05:1e:6c:eb:0d:6b:55:0e:5c:ef:d5:c1:1c:
30:bc:82:1c:4a:30:c2:cd:f4:79:ad:ff:ab:67:44:
7c:21:c6:2a:f5:46:0a:88:08:08:da:ef:70:ef:15:
c9:a1:f9:90:01:4f:17:71:9f:ef:ae:48:b0:ee:c3:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:28:0E:BD:F3:F7:8B:47:E7:8E:C5:EA:44:92:3A:A4:4D:41:2C
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:5c:4a:63:36:24:08:4d:78:f7:9a:45:d6:1b:13:3c:bd:
b0:f7:01:0c:40:2b:f8:fd:68:c2:d6:b4:48:e3:cf:cf:5e:07:
69:c3:70:32:dd:b8:cf:31:0b:e5:59:98:c1:bf:a5:5e:00:8c:
06:b8:db:30:81:4c:0e:93:45:2d:a2:49:23:6a:39:5f:a9:e9:
45:15:ad:10:30:a7:bb:89:33:c9:08:8b:88:00:93:d8:e2:59:
29:37:bf:ff:6d:97:72:d5:ab:fc:96:d3:42:35:f8:09:74:ca:
b5:c9:ae:26:c8:c3:1a:bb:e8:7c:a0:2d:59:21:3b:fa:38:34:
d2:92:87:37:32:aa:e4:0f:fe:7e:e8:c4:9c:b0:c4:9d:15:23:
f1:92:9f:05:7a:d4:6e:13:ea:2f:8e:4a:45:be:a0:0f:40:0f:
1b:d0:a8:e9:26:ee:7c:4c:51:b3:95:b1:0c:4e:39:bd:11:6a:
fa:a4:6a:1a:e2:f8:b0:39:a8:62:bc:2f:7e:70:4a:9f:75:9e:
be:2a:2b:32:45:67:5f:fa:aa:c2:1d:f7:45:0c:e3:e4:99:de:
83:fa:47:8c:d6:12:85:9b:dd:70:da:33:65:e1:f6:f7:25:a0:
3a:71:3a:70:26:e7:e9:e0:23:53:10:a7:18:8e:9b:da:ff:66:
61:91:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:27 2025 by rpki-client