Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier: biweUykzMim8TpTvoDHANmpG0Sl80pMffhOSXM8FMbg=
Subject key identifier: 06:FD:3B:A4:8E:78:C1:B6:FD:D8:37:FC:77:19:2C:F0:20:E0:46:1E
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial: 01987298A4FCE6F54BACFAE9C12977FD9B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number: 90
Signing time: Mon 04 Aug 2025 01:01:03 +0000
Manifest this update: Mon 04 Aug 2025 01:01:03 +0000
Manifest next update: Tue 05 Aug 2025 01:01:03 +0000
Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: ZKyuuWZLDTi7o48qbzAgY76ool/C6QaJsUUbNZjLbLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a4:fc:e6:f5:4b:ac:fa:e9:c1:29:77:fd:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
Validity
Not Before: Aug 4 01:01:03 2025 GMT
Not After : Aug 5 01:01:03 2025 GMT
Subject: CN=06fd3ba48e78c1b6fdd837fc77192cf020e0461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:d2:d8:a5:99:20:d6:e7:2c:52:ac:c9:b8:
71:29:b4:1c:0c:a1:e8:e1:19:8f:47:b9:52:e5:dc:
99:3a:51:03:47:c4:f4:5c:03:56:22:6a:5d:5b:57:
b8:e8:11:8b:fa:7c:87:2f:66:58:be:32:3f:e2:f2:
b7:9f:ed:e4:43:92:9a:8a:f5:96:b0:f7:fc:90:43:
70:0a:66:14:65:9d:38:51:b4:59:e1:47:e2:fc:32:
6f:7e:3c:ca:d1:61:30:14:bb:64:06:02:7b:b7:b8:
fe:f9:82:8e:7d:5a:26:c9:d6:33:3f:78:99:d3:94:
a1:74:69:e3:1f:70:9e:7f:7d:fd:16:3a:34:a1:47:
01:b1:4a:21:df:94:7a:bb:8e:c3:b1:f4:3f:28:dd:
2e:8a:b2:43:75:66:ca:f6:2f:23:7f:e2:39:28:13:
8e:b0:c1:93:d0:47:9c:57:ab:db:78:ab:8c:02:31:
49:f4:9d:ee:9a:eb:eb:df:9b:41:7a:32:6a:9a:f6:
ec:25:ce:6d:e7:d8:a3:aa:be:70:1e:d8:1d:02:17:
67:40:73:8e:3b:b0:0e:b0:e3:b7:47:57:84:2f:2e:
2d:75:f7:9f:48:5c:23:b5:cd:78:f0:7e:34:06:75:
fb:25:57:02:41:bf:62:fe:96:cb:94:3a:bf:c1:df:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:3B:A4:8E:78:C1:B6:FD:D8:37:FC:77:19:2C:F0:20:E0:46:1E
X509v3 Authority Key Identifier:
keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:ef:ac:dd:3a:1f:9f:c0:12:f6:6e:73:de:60:58:00:46:
15:54:49:dd:09:e5:77:3f:b6:74:52:69:70:1e:3c:cf:72:d5:
a2:85:c4:20:e3:cd:91:12:3e:ee:5b:f1:5d:cf:48:31:00:7c:
91:fe:25:25:67:b6:21:2b:17:0d:01:ab:53:bc:88:eb:c9:c7:
ce:ba:07:08:4e:33:9f:20:ba:d1:14:7d:60:b7:0d:7b:2c:8f:
6c:64:85:19:99:c5:d8:ba:bd:67:2d:d0:5c:f7:fd:5e:f1:18:
d1:2c:3e:6c:7a:1a:73:f2:d0:f1:f7:6f:45:b0:2b:c8:84:3a:
ed:36:1f:10:26:1f:ef:74:29:82:58:23:ca:f1:69:46:b3:7f:
5c:e5:9d:b6:5d:a8:e5:0d:7a:34:bb:2d:a8:91:8f:ed:bc:ea:
34:fc:21:45:0c:f6:17:d7:b2:24:f9:0d:70:06:3b:62:02:82:
b2:a2:45:09:cc:30:06:8f:a9:9d:96:72:9c:4a:d1:e7:f3:53:
24:e3:82:eb:4c:cf:76:b5:cd:fa:d3:77:f5:f6:13:fc:4a:72:
0a:ef:48:d0:6b:a1:49:0b:74:46:b7:a2:d8:ec:a4:3b:e3:be:
90:63:00:82:50:4b:22:db:af:47:8a:00:5f:f8:3a:ee:56:f1:
00:dc:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:09 2025 by rpki-client