
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: j0sNRPIWwQuQ1vqEydLaNVlWdJ2nELIetBU2H2TAB3w=
Subject key identifier: 22:16:6C:73:E5:FF:74:55:E9:AB:CD:D5:11:AC:A4:6B:1C:7D:00:31
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 01987C094D854C1FF1D21A69E0EE5773CDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 06EC
Signing time: Tue 05 Aug 2025 21:00:41 +0000
Manifest this update: Tue 05 Aug 2025 21:00:41 +0000
Manifest next update: Wed 06 Aug 2025 21:00:41 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: cDm5n3yIOz0Lim93iD5IWJNj/iq07b3QusRLKaBqns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:4d:85:4c:1f:f1:d2:1a:69:e0:ee:57:73:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Aug 5 21:00:41 2025 GMT
Not After : Aug 6 21:00:41 2025 GMT
Subject: CN=22166c73e5ff7455e9abcdd511aca46b1c7d0031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:2c:28:44:c3:4d:0d:84:90:1b:a2:ac:c3:
d5:de:c8:d2:91:99:93:5a:52:91:7e:67:a1:be:9e:
f4:bc:3d:b1:5c:78:5d:25:b8:14:c3:0c:f7:da:05:
34:b4:fc:c6:0f:26:73:be:74:a5:f5:70:10:47:32:
90:cf:fd:11:11:63:ba:a1:bf:7e:f8:29:9b:1d:d0:
cc:e9:1f:dc:86:3c:a2:a8:25:83:91:43:68:d8:98:
d9:b3:ad:15:dd:75:b2:8a:f4:a9:bb:7f:a7:e6:84:
46:4e:26:0c:66:06:a4:9b:50:99:37:b5:ca:eb:1f:
53:e7:94:b1:6c:0d:c8:d9:19:54:b4:af:8e:d4:15:
94:37:2f:23:7d:9a:e9:1d:ee:f2:2f:6b:27:b3:c0:
6f:e4:c7:a0:5e:ed:c8:aa:7c:ce:19:c3:2d:48:2f:
a7:96:0f:3a:b2:4e:aa:d5:25:93:c8:d7:51:cd:16:
72:fb:a6:eb:00:e9:bb:be:2d:b9:ff:2c:dc:88:89:
ec:35:13:ed:ee:d6:68:d0:7b:f0:a8:82:be:3b:6d:
c2:b5:15:7b:7a:53:b4:78:ff:c9:29:0e:90:34:c5:
a1:66:b6:8d:0f:2c:ac:3f:83:f6:a8:d5:2d:bf:68:
0f:50:83:4e:bf:39:82:66:37:c6:9f:71:7d:76:87:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:6C:73:E5:FF:74:55:E9:AB:CD:D5:11:AC:A4:6B:1C:7D:00:31
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:49:27:bf:28:67:71:49:a3:35:c8:93:0a:ce:ce:8d:dc:
8c:43:25:7e:4e:74:41:68:5d:07:ee:87:6e:f6:ae:a6:fe:77:
7c:a5:a1:c9:b4:45:37:f8:41:08:b7:07:04:e1:65:6c:d0:b3:
9e:70:86:77:e4:25:77:dc:50:12:66:64:5a:7e:03:75:8d:5b:
bd:d6:ca:f9:0d:96:72:59:01:59:07:68:ca:5e:c0:e5:32:2f:
60:c9:93:41:16:71:3b:3c:10:c3:c9:e4:12:02:39:8b:99:9b:
eb:70:f3:22:c1:a2:98:c1:ed:60:23:92:db:9f:d7:ef:ad:81:
79:5e:46:a4:c5:57:56:1d:66:54:e7:33:f8:12:fe:52:39:50:
e5:f8:ae:6a:32:58:12:dd:13:b3:50:52:8a:b1:37:38:b4:1c:
ad:db:8e:02:9e:8a:a3:14:b4:7c:b1:97:6b:7d:f4:c7:a0:cd:
ef:00:c5:42:fc:32:16:34:db:27:94:25:a3:c8:b9:fe:fb:78:
dc:71:de:16:41:e3:1e:80:53:44:8d:a9:c3:1e:70:e8:81:bf:
db:97:ff:b2:b9:d3:c4:22:42:46:9a:68:94:89:03:2b:d3:aa:
00:0a:e5:ba:40:6e:17:37:0b:9e:12:a3:af:9a:3e:ca:31:f3:
1f:99:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:42 2025 by rpki-client