Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: MR00Y3oDOQ4mXvweruG8hOpWNwSyfLKuX6bzLfqwX0s=
Subject key identifier: 66:7F:57:95:5D:65:79:B8:15:A8:2A:5A:9B:DF:0D:C0:B4:E6:94:1C
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 0198835670E7CFFFF1C544736C3AEE126C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 07:02:16 +0000
Manifest this update: Thu 07 Aug 2025 07:02:16 +0000
Manifest next update: Fri 08 Aug 2025 07:02:16 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: 1OYTPc+wE9CTxyEXwxs6bmhS5uhxeO/+o2sgMbdoGY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:70:e7:cf:ff:f1:c5:44:73:6c:3a:ee:12:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Aug 7 07:02:16 2025 GMT
Not After : Aug 8 07:02:16 2025 GMT
Subject: CN=667f57955d6579b815a82a5a9bdf0dc0b4e6941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:fa:4b:fe:38:79:37:53:de:17:7c:07:b2:
69:20:d5:84:8b:84:c1:66:3c:8e:2b:39:7c:5f:69:
a0:bd:6b:3e:26:e9:4b:ae:7f:36:31:91:a9:48:1b:
00:51:73:c4:ce:6b:e6:7f:e2:df:00:4a:9b:03:9a:
20:89:35:dc:8c:f2:6c:3b:7b:31:8e:2c:dd:09:a9:
42:fa:75:16:02:c8:5f:0a:7a:bb:cb:4a:01:a3:d4:
66:96:56:cf:92:cf:e5:5d:02:65:74:3a:c7:95:25:
3a:cd:bb:39:dc:60:22:d1:56:2e:58:39:78:07:84:
d4:52:ef:32:e1:f0:12:0a:2e:af:83:c7:64:b6:c4:
d3:12:c0:5d:89:46:64:01:c6:4a:ab:b2:c9:4a:75:
a6:f6:86:ea:c2:ff:26:54:29:7c:2a:d1:f2:22:f1:
a6:0b:d8:4f:10:4b:5f:d6:60:7f:ae:86:6a:70:87:
ec:fa:ee:c7:5b:df:b3:a4:2f:81:30:26:02:2f:9f:
48:87:7c:9b:fe:3f:42:51:a9:93:47:74:31:f4:e2:
a6:69:dc:ba:f7:43:20:12:5e:f2:e0:43:16:f2:ca:
ce:a6:8d:bc:3a:60:59:76:8c:4d:09:e2:7a:96:3d:
1d:2d:e3:f4:40:9c:9c:06:d8:aa:9d:2c:c2:38:ec:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:57:95:5D:65:79:B8:15:A8:2A:5A:9B:DF:0D:C0:B4:E6:94:1C
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:1e:3b:9a:7f:bb:b9:b7:ca:03:25:28:da:4b:33:da:8e:
00:a0:86:d4:83:4c:ec:cf:e9:67:66:f1:c7:30:9e:27:35:dd:
f2:96:45:6f:49:ad:ce:7d:75:f8:da:f1:64:4b:60:9a:03:32:
86:e6:c6:f5:e6:4b:82:1e:f5:2e:7a:1e:66:05:45:fa:1b:65:
29:7a:46:64:7e:52:4a:ba:a8:f8:22:49:ff:bd:df:e7:ee:b4:
65:64:b0:e4:a9:4f:29:2c:7c:f5:ee:35:cd:8a:c6:34:d0:9e:
58:12:d5:a8:1d:fa:b1:ba:5a:96:1f:d7:2f:c1:b3:a9:ab:03:
32:da:22:cf:57:a0:8f:43:a2:0d:ba:0e:56:4e:6d:ab:8f:69:
40:09:90:ec:9e:96:a4:8e:6f:86:df:53:6c:27:84:7a:53:c3:
31:13:aa:b4:97:17:74:e7:cb:7f:13:e8:19:ab:cb:ba:4a:a0:
55:04:bb:56:44:05:1d:c9:d1:36:4a:49:4f:81:c8:6d:54:5c:
6e:bc:b5:60:89:8d:f1:b4:c4:f6:0e:f1:34:ef:24:d3:b7:7a:
be:21:3f:40:b7:08:da:cc:1b:2d:e6:15:28:1c:73:4f:5e:96:
cd:f2:3a:75:f9:92:fe:13:a3:a7:d0:95:3d:89:0a:d8:85:9b:
65:d0:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:23 2025 by rpki-client