Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: FDxQ8xNoKmLaRdmZ9I1paK5dOLomNKbDYwRXqc0M7w4=
Subject key identifier: 32:96:3B:46:A3:35:E1:F9:BB:92:7C:2B:70:2B:78:C7:78:93:30:44
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 019873E3793A3E0C66E4B537E3430F22187C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 0ECC
Signing time: Mon 04 Aug 2025 07:02:24 +0000
Manifest this update: Mon 04 Aug 2025 07:02:24 +0000
Manifest next update: Tue 05 Aug 2025 07:02:24 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: VYop2TIDz8+PrIKV2QtUMFjEsrGXWsd3/410Ubkacmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:79:3a:3e:0c:66:e4:b5:37:e3:43:0f:22:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Aug 4 07:02:24 2025 GMT
Not After : Aug 5 07:02:24 2025 GMT
Subject: CN=32963b46a335e1f9bb927c2b702b78c778933044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:61:6c:83:ea:86:74:cf:1f:fa:18:5b:59:
ca:ee:f3:c2:a3:fb:a4:61:65:bb:d2:ce:0a:d8:04:
9a:66:a6:c7:fc:93:61:c5:dc:e9:e1:10:f3:cb:0a:
30:6c:fa:84:68:71:cd:ad:eb:16:68:76:8e:dc:e0:
38:52:c2:e3:9e:40:9c:83:48:0e:df:6f:c5:6a:57:
12:24:43:67:01:68:16:96:7f:73:a1:5f:50:06:17:
5d:20:b8:fc:cd:da:f2:37:7b:85:9d:9d:9c:ca:8d:
b0:5f:3e:aa:c0:ec:20:f8:88:a4:c7:77:23:ec:e0:
34:d3:9a:a9:ce:96:e1:52:18:aa:7d:c8:89:fd:97:
05:2c:f7:15:9c:bd:9b:26:e3:fb:66:6b:6e:5b:96:
7b:a3:21:8b:a7:48:78:a9:42:63:8d:f8:88:ff:72:
a3:a7:36:2b:a5:bf:f5:a4:8c:5f:fd:73:ae:9b:ef:
d0:c5:bc:6a:86:85:41:e4:ce:47:ca:35:01:d1:73:
fe:f8:c9:7d:38:fe:46:14:3d:0e:f3:2f:3e:38:ef:
bc:5f:e4:2d:e5:7a:aa:4a:32:75:4a:9d:35:55:dc:
9a:60:a0:f6:84:af:b4:7a:15:e7:02:82:49:1a:3e:
c0:9e:66:4e:40:da:43:c0:24:6a:3e:19:86:2c:2a:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:3B:46:A3:35:E1:F9:BB:92:7C:2B:70:2B:78:C7:78:93:30:44
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:93:49:8c:01:a1:70:86:3d:c6:a5:de:43:11:3a:30:c2:91:
00:85:6f:0e:2d:ce:d7:f8:03:07:d8:c6:b1:c6:a5:9f:23:8e:
50:67:33:a5:54:8b:d9:76:82:5a:d2:21:f3:c0:e5:4c:18:9c:
a2:da:84:8f:57:44:92:8b:d7:88:58:dd:93:fc:1f:3f:5c:ea:
b7:c0:90:82:81:9f:1c:a0:8c:02:8f:65:8c:10:05:ec:3d:97:
57:e8:4c:15:2d:3f:c0:32:c2:8d:2c:d9:d8:7f:03:f9:09:d9:
3c:00:15:a3:19:b2:44:19:a7:a5:4c:06:95:a1:26:45:37:31:
0e:60:9c:8e:ae:2c:c0:84:92:3c:b9:cd:f0:04:49:d1:c5:be:
71:56:3f:72:33:3a:23:fa:cf:08:59:f6:0b:f6:01:76:94:28:
7d:65:0b:d4:80:a0:fc:e9:24:58:c4:6b:db:e8:5b:48:48:60:
b2:4d:7c:14:0b:10:fc:93:3f:fc:a4:10:08:95:49:51:d5:03:
01:f5:d6:9c:2f:da:b6:f0:ac:5d:c1:8f:d1:e1:5f:a9:20:d0:
52:41:75:5b:6f:49:f4:74:38:8a:4f:ff:5a:91:e2:9b:c7:4e:
80:35:a9:21:87:78:a7:01:5c:58:a9:b7:9b:c5:78:c0:84:19:
95:fe:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:35 2025 by rpki-client