Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: fosbERfYf3ly1HxGLN1lTefEsxtyKN7o2Yz2B2ZsM5A=
Subject key identifier: 9B:75:1D:07:9F:42:59:1E:EB:DA:E8:B9:72:FC:A0:90:96:31:31:0F
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 019880C1D6703196C38848DA0B62B7B71B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 09D8
Signing time: Wed 06 Aug 2025 19:00:43 +0000
Manifest this update: Wed 06 Aug 2025 19:00:43 +0000
Manifest next update: Thu 07 Aug 2025 19:00:43 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: ygNg3sRgcAvjUXnl/ygsyGsicjDVd3477XMntgQp9Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:d6:70:31:96:c3:88:48:da:0b:62:b7:b7:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Aug 6 19:00:43 2025 GMT
Not After : Aug 7 19:00:43 2025 GMT
Subject: CN=9b751d079f42591eebdae8b972fca0909631310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:19:04:0b:37:53:a8:30:31:84:05:b3:f3:
14:88:0c:9d:ee:ee:71:38:00:5e:87:c1:09:13:b1:
00:23:23:a6:49:5c:dc:9b:f4:49:6e:88:4d:b9:5e:
09:32:0d:08:6b:33:44:a9:b5:b3:c2:94:5f:0a:c6:
b3:ac:1d:62:c0:27:66:6b:25:ef:29:25:fe:64:00:
ba:97:98:cd:01:f4:b1:2d:2b:ca:c4:b8:22:62:d4:
ac:ae:1a:e6:5a:f8:b8:6f:b6:fc:7d:e1:ad:ca:50:
d7:1c:c3:6c:38:a0:75:5b:29:84:3f:a2:88:55:1f:
81:47:cf:1b:84:fe:f3:f5:fc:d4:db:10:63:c0:1f:
6f:a2:66:26:72:ec:62:66:6d:61:0e:06:f4:82:ea:
fc:6d:b0:c5:0b:d4:3c:07:35:63:d1:52:f6:3e:1a:
c3:9c:7a:8a:bf:79:4c:b1:8f:cb:a3:56:11:dd:c8:
09:d8:32:80:68:be:7c:c1:11:d2:3c:e0:64:96:57:
dd:c4:67:cd:16:6f:9b:57:1a:25:eb:1f:d3:21:14:
52:9d:cf:aa:a3:84:54:e9:40:c8:75:c7:cc:a3:5d:
2f:c8:7b:bb:77:15:bb:e1:27:cc:48:dc:ac:1a:21:
dd:54:7b:a7:a7:a7:7d:5d:68:48:0e:90:0c:59:69:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:1D:07:9F:42:59:1E:EB:DA:E8:B9:72:FC:A0:90:96:31:31:0F
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:35:ce:cd:3d:ea:d6:8b:b3:45:09:76:5d:e1:68:87:9b:
b5:53:81:68:68:7d:f3:a2:d0:83:ff:60:8a:c3:d1:53:f0:79:
9d:63:b7:d5:b6:c6:a1:00:f1:15:15:db:a9:ac:6b:b9:51:d1:
ae:b9:f8:1e:ff:99:6e:c3:f5:cb:da:40:d1:a9:cc:65:6a:a9:
06:be:49:f3:0e:72:f0:82:2a:21:a6:fc:ee:63:e0:27:f9:9d:
b7:63:68:3f:15:0a:fb:05:d5:16:9a:1a:70:24:02:fd:b5:f6:
d4:2a:03:5f:61:c0:93:69:53:52:ad:86:f9:bf:5d:62:2d:3e:
1c:64:43:dd:dd:76:42:97:7e:18:d3:a8:26:bf:d6:0b:31:3d:
eb:00:5f:b2:50:c5:0a:4b:49:bc:18:04:05:7c:4d:3b:c6:c3:
a7:06:62:98:62:0b:dd:a4:0b:b0:f9:8f:96:2d:dd:1d:72:bb:
c5:aa:90:03:4f:8c:a0:64:e7:88:a6:bc:20:c8:31:ac:4f:de:
34:0d:25:e1:34:f1:24:70:70:08:24:3a:8b:b4:39:c9:9b:20:
8a:d9:d6:ae:d6:cb:0e:70:7b:1f:a3:f1:33:ff:a1:08:74:00:
80:e1:e6:73:78:90:8e:96:29:67:8e:60:77:f4:15:a5:45:7c:
70:82:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:55 2025 by rpki-client