Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
File: kdTzrA50tq60hL0U9ocdmjBCK30.mft (raw, json)
Hash identifier: +Znna9duq+19WLHXRhC0EOYW6NvqfYTXBpgZob9mgGM=
Subject key identifier: 1A:91:41:F7:6A:93:2F:0C:09:A7:B3:26:3B:C7:6A:B9:D9:12:AF:72
Authority key identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
Certificate issuer: /CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Certificate serial: 019776E657D5F8AEC38546F711958854111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
Manifest number: 0B
Signing time: Mon 16 Jun 2025 04:01:36 +0000
Manifest this update: Mon 16 Jun 2025 04:01:36 +0000
Manifest next update: Tue 17 Jun 2025 04:01:36 +0000
Files and hashes: 1: kdTzrA50tq60hL0U9ocdmjBCK30.crl (hash: LksoEaTEmfNbyv6I9NqsG7iwjRTRndhKDafjHtYQJsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:57:d5:f8:ae:c3:85:46:f7:11:95:88:54:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Validity
Not Before: Jun 16 04:01:36 2025 GMT
Not After : Jun 17 04:01:36 2025 GMT
Subject: CN=1a9141f76a932f0c09a7b3263bc76ab9d912af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cf:fe:be:69:4d:e8:7d:3a:6b:87:c6:d0:c4:
f3:dd:95:f8:50:b3:27:c4:39:89:18:26:59:b6:f6:
ab:84:0b:d8:96:db:26:5a:50:4f:96:b8:e9:c6:5b:
9b:0f:e0:81:81:b2:c4:ec:83:f6:08:c5:76:1a:29:
54:d2:33:ae:68:ae:6c:42:60:4f:f2:94:07:96:64:
e2:eb:28:56:27:85:79:9d:24:53:58:3e:ad:83:fd:
c2:73:4a:37:02:6d:b9:4f:66:c7:4c:08:5a:72:ff:
37:1b:d8:fb:b7:eb:59:d0:03:3c:66:e1:1f:64:8f:
bd:4e:42:46:83:cb:f6:e9:ec:e9:3c:d6:d1:06:a8:
ce:89:80:52:8b:d9:e0:81:81:ac:c9:26:7b:96:8b:
81:fb:a0:6b:70:ac:62:ce:65:91:8f:a8:cb:cc:1a:
c1:2d:c8:c9:fb:b4:92:33:78:a5:8a:05:76:d1:31:
bc:93:25:ad:ed:3c:4e:4a:0b:36:e9:ea:b1:f9:ed:
60:43:f1:ab:84:f4:f4:cb:ee:17:88:85:2f:69:1e:
51:76:69:5f:74:b4:fc:05:a9:d7:08:fd:f0:96:b6:
a0:29:27:e5:3e:0d:b9:28:84:e6:1e:73:a9:0a:39:
56:bf:7e:34:b9:8d:fd:32:50:42:9f:d9:f5:21:9b:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:41:F7:6A:93:2F:0C:09:A7:B3:26:3B:C7:6A:B9:D9:12:AF:72
X509v3 Authority Key Identifier:
keyid:91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ea:6d:65:b3:26:9d:32:37:4a:11:5a:a3:38:f4:3e:31:3e:
44:ed:ea:21:99:74:74:38:6d:eb:f3:50:7a:f9:3b:14:e1:fc:
cc:de:1b:23:af:e1:44:68:7c:b0:ba:f5:88:51:e4:b3:60:f4:
5f:63:08:b9:e9:95:6f:73:33:9e:b9:b5:73:13:26:be:da:37:
2d:57:16:dd:f9:9f:49:f6:04:cb:e0:8f:09:5d:52:48:53:0f:
b1:9e:40:e5:2e:f7:65:f1:50:a2:6e:fb:9a:7c:ff:11:29:7b:
c5:d8:2d:7a:12:d0:da:e7:df:55:e0:4e:81:54:76:7a:95:d6:
db:32:04:da:55:fa:c2:fe:e4:8c:e1:e3:9f:e5:4e:b1:d4:a1:
54:18:f9:0f:fc:40:6b:b6:fd:87:bf:b0:9f:de:b5:75:9b:f3:
6f:59:4a:54:c9:f3:26:f9:1d:fd:c5:f9:50:6b:07:83:0d:6f:
6d:65:54:68:46:12:34:11:33:3c:7a:10:69:eb:61:de:4c:15:
fc:ea:1c:2e:a2:7a:82:28:c2:31:d7:49:7d:ac:a6:a3:42:56:
a6:75:59:70:99:85:c4:dc:db:c0:86:0e:31:4d:e3:82:22:9f:
f9:cd:cb:05:05:a1:fe:60:ca:e7:4c:07:7b:29:75:8f:02:ec:
53:f8:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:18:08 2025 by rpki-client