Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: 5izIlxFEK2Kyi+RMM9hh03x0yb+6yoscHY1Ob6KJMjc=
Subject key identifier: 72:F3:C9:DF:6D:2B:99:74:2F:00:4C:7F:EE:18:29:D1:AF:78:4D:03
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 01987ED3F3ECEC5872BB07A6CFB4E84CAAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 10:01:16 +0000
Manifest this update: Wed 06 Aug 2025 10:01:16 +0000
Manifest next update: Thu 07 Aug 2025 10:01:16 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: M+RQNMFIZU6qEkNG5JiDFwV39NckHYkz9WrdD4s/huY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:f3:ec:ec:58:72:bb:07:a6:cf:b4:e8:4c:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Aug 6 10:01:16 2025 GMT
Not After : Aug 7 10:01:16 2025 GMT
Subject: CN=72f3c9df6d2b99742f004c7fee1829d1af784d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:fe:2e:ed:51:76:21:cf:a1:58:b7:56:44:
b4:df:d1:60:35:b9:2a:9a:08:1c:4f:bb:c0:79:39:
7f:b4:a4:0a:1b:71:61:28:ab:a7:1f:37:c9:d3:98:
3f:a0:73:71:fe:b1:46:d1:40:55:44:70:ed:bd:39:
09:b2:9a:d5:20:00:3b:42:86:86:c6:df:d7:da:7b:
cc:8f:06:85:af:17:8c:3c:fe:1c:16:ad:e8:c3:99:
cf:1f:25:7d:1e:89:c0:61:62:cf:30:3f:58:8a:cd:
dc:17:3c:5d:c4:6b:4a:d3:52:38:27:1d:e3:85:9f:
60:bf:65:3c:b4:d0:e4:8d:c6:1a:10:59:17:da:34:
d1:a7:82:7f:7b:54:40:c4:57:53:c0:56:6c:39:60:
19:0d:3c:aa:a6:3d:9a:40:92:74:11:5b:ba:0e:f0:
03:b3:b2:38:f9:31:b5:fb:0c:7e:54:6b:0c:16:2e:
c7:e9:63:44:0b:12:3e:4c:ec:f7:80:24:1b:e4:8f:
21:5c:3f:b4:1f:c3:70:ea:bc:86:de:76:5e:5d:4e:
48:c0:a2:a3:e6:24:87:aa:f2:91:de:c1:0d:d7:41:
f6:ab:f7:7c:37:d0:da:14:17:39:8f:28:a6:06:0d:
60:85:a5:3e:46:1f:a8:02:eb:f2:d7:c5:ea:4b:c7:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:C9:DF:6D:2B:99:74:2F:00:4C:7F:EE:18:29:D1:AF:78:4D:03
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:0a:60:d3:94:29:15:6d:ec:29:44:5f:ee:25:1f:04:71:
66:f7:67:93:1c:39:5e:06:59:6e:4c:94:15:14:70:4e:23:63:
25:93:da:e1:11:3e:51:46:11:e9:a6:e5:b9:a4:6d:54:d8:4d:
ec:95:87:3d:a2:d1:78:ad:81:7d:a8:14:1f:98:ba:0e:97:d5:
6c:38:cb:39:50:d4:b0:bd:ce:88:8c:82:b5:70:20:7b:08:be:
98:81:2e:80:a4:32:2d:b1:c4:db:c1:b1:0e:ac:d6:b6:2f:50:
1e:5d:5c:f8:28:88:44:a8:df:ee:d0:b7:ed:b8:d3:5d:97:db:
a4:67:66:39:71:81:fd:00:27:0f:08:9e:52:e3:fc:ef:77:8f:
37:9b:15:a3:85:4e:40:d2:e9:41:3d:dc:9d:8f:c1:b4:d4:c7:
20:ce:cd:36:86:c1:70:e3:64:f4:36:77:e7:f3:98:0c:42:33:
09:8a:14:59:5c:2e:67:6c:33:be:80:2b:93:03:54:7d:40:a5:
57:ff:39:82:e0:2c:9b:d3:f7:bb:a1:c4:f0:36:5c:23:c9:1c:
88:f2:26:bd:5d:93:e0:8b:e5:7e:15:44:e5:a7:01:9f:23:f4:
5d:4e:82:4d:30:31:ce:55:61:79:9f:a9:fb:20:6a:30:9a:1f:
ee:5a:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:19 2025 by rpki-client