Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: 17A2hBWlsqwkmfAapbNbEe6ZQL7Er6s2F2sHugqA2N0=
Subject key identifier: 0F:E4:FE:79:16:61:D5:91:2F:6A:B1:73:DA:6B:09:A8:AE:99:AC:09
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 019882425D29D91AF99EA4C8367A95A5A610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 02:00:43 +0000
Manifest this update: Thu 07 Aug 2025 02:00:43 +0000
Manifest next update: Fri 08 Aug 2025 02:00:43 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: WMKgYJIFRMJ4+XfCJtNgfOBZK5aKM90FEnzD2BfwwVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:5d:29:d9:1a:f9:9e:a4:c8:36:7a:95:a5:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: Aug 7 02:00:43 2025 GMT
Not After : Aug 8 02:00:43 2025 GMT
Subject: CN=0fe4fe791661d5912f6ab173da6b09a8ae99ac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:84:d0:8d:b3:1a:ac:65:34:58:34:ab:b3:
a1:2c:c8:e9:f7:9a:0a:d8:44:3a:b3:90:d7:d8:82:
b2:0f:2a:3c:72:5f:f0:1c:5c:62:23:08:af:0e:e1:
30:a9:68:70:f6:6b:93:dd:38:0a:fa:99:9b:58:1a:
e0:19:e8:0c:83:23:13:44:81:f0:b2:b7:c3:9e:91:
8e:e2:3d:0c:57:92:95:f2:50:3b:57:74:b2:fc:97:
65:ce:f6:73:ab:93:a3:7a:b1:20:65:13:55:27:d4:
a5:be:6a:bf:f2:34:4b:f4:1a:50:29:f1:df:09:82:
8b:e5:9f:7a:a5:7a:3c:86:ea:c9:8c:15:63:42:1f:
81:e8:8e:a5:46:e7:85:ab:47:43:fc:f8:16:47:8f:
08:cd:2a:74:14:86:59:22:77:f5:76:c0:00:3b:3e:
78:e3:15:31:56:73:5f:dc:cc:e9:b0:fc:a1:b4:ec:
7d:d8:18:94:0e:7d:d9:e9:17:2e:e4:6c:81:8f:29:
df:da:4c:f0:c6:30:b3:f7:74:98:af:c9:c1:fa:26:
33:02:18:6e:da:f8:f1:13:fd:24:c5:82:21:aa:4b:
94:23:e0:f7:0e:30:e5:a6:1f:c0:66:f9:0e:d3:1f:
0a:2b:2b:71:ad:6c:22:6e:20:3c:12:f4:c0:43:9c:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:FE:79:16:61:D5:91:2F:6A:B1:73:DA:6B:09:A8:AE:99:AC:09
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a4:66:d4:29:38:ea:7b:e7:8d:0d:d1:7e:a1:73:38:25:85:
e0:a0:0c:2a:95:34:49:65:25:c3:ed:0e:cf:7d:63:b6:37:c0:
1a:fa:93:54:c0:13:0f:9f:c1:c7:03:9f:2f:48:47:96:f0:a4:
64:ab:89:fe:77:71:f5:d1:b2:29:49:4c:b6:1e:49:be:c1:f1:
a7:8a:95:3e:1a:e9:26:45:86:b8:0b:21:ee:b9:d5:30:87:43:
0f:07:1b:cc:f3:3c:88:95:3d:6e:86:22:39:50:5d:48:e4:e5:
d2:5c:f1:b8:c3:96:e4:e8:11:71:df:13:3d:1a:fd:40:76:b7:
a6:99:30:1b:b1:00:8a:27:b9:01:ec:71:6f:8b:66:fb:36:51:
db:87:48:1f:36:cb:38:1b:20:8e:9e:49:33:19:52:e7:1b:32:
20:74:aa:f5:d8:b0:f1:46:1d:80:ee:7a:b5:22:d5:87:d3:5a:
71:fb:99:0c:c4:2d:93:6c:32:87:71:86:54:5f:76:ea:2d:36:
91:83:67:ec:6c:83:35:97:17:03:e6:ad:52:f9:70:33:a6:56:
07:e1:f7:ce:52:f0:9c:9d:b6:00:66:0b:64:81:9d:2d:1e:21:
43:32:eb:7b:1d:ad:79:19:38:6b:6c:b5:b4:45:27:0f:1c:46:
14:59:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:36 2025 by rpki-client