Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
File: kdTzrA50tq60hL0U9ocdmjBCK30.mft (raw, json)
Hash identifier: Epnh6+d6JdfWdpqEnjrXNsc2K7v7tAFQGrRnmPFCDts=
Subject key identifier: F2:CD:20:F4:1D:37:93:88:EF:F5:77:3A:57:06:DF:45:8D:6B:38:C1
Authority key identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
Certificate issuer: /CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Certificate serial: 019890D970BE655AA2450110F71DA53E2BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
Manifest number: 9D
Signing time: Sat 09 Aug 2025 22:00:25 +0000
Manifest this update: Sat 09 Aug 2025 22:00:25 +0000
Manifest next update: Sun 10 Aug 2025 22:00:25 +0000
Files and hashes: 1: kdTzrA50tq60hL0U9ocdmjBCK30.crl (hash: j5iEkfyYlIVFPGsxifSFFUKxh2jbdDIhAcV37UUeuP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:70:be:65:5a:a2:45:01:10:f7:1d:a5:3e:2b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Validity
Not Before: Aug 9 22:00:25 2025 GMT
Not After : Aug 10 22:00:25 2025 GMT
Subject: CN=f2cd20f41d379388eff5773a5706df458d6b38c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:6c:7e:14:cd:62:42:cb:c7:b4:c8:17:ec:
e7:cc:90:fe:5c:dc:da:02:c4:59:d9:9f:7f:a0:fd:
f7:59:74:e3:9d:2e:b7:15:90:29:ab:79:87:1a:6b:
72:07:ab:7d:e2:33:a9:b8:dc:61:62:81:84:e0:7b:
23:13:02:7c:ef:5d:ac:ac:62:3d:1b:87:21:3d:56:
e9:7a:2d:e7:4a:ef:9b:6c:b0:23:c3:56:87:93:f6:
c1:62:7a:e9:1d:2a:4c:eb:a7:59:5e:ea:68:69:e6:
55:a8:0f:a5:f9:b9:34:dd:4f:4c:31:ce:11:98:c4:
f1:46:3e:26:30:06:33:11:28:37:60:c1:95:b2:e4:
ea:b2:d7:43:3c:b4:5a:45:0a:97:7f:4e:d8:63:73:
34:3d:90:ce:f9:29:34:53:65:ab:b9:f7:a9:bb:e6:
fa:c9:94:0a:a7:bc:92:1e:b8:aa:48:a1:18:6a:e7:
9f:f6:ac:23:92:88:21:b8:f9:b1:85:6a:7e:be:95:
08:be:a6:36:7d:09:af:65:08:8a:dd:27:6a:82:ac:
90:0d:b4:82:66:4d:15:48:4f:7d:ce:25:5b:4f:f9:
84:44:81:99:f9:0f:e4:2a:2e:2f:f6:0b:3e:fd:78:
58:16:4c:76:d9:3f:5e:78:4f:ad:2b:9a:4e:c0:82:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:20:F4:1D:37:93:88:EF:F5:77:3A:57:06:DF:45:8D:6B:38:C1
X509v3 Authority Key Identifier:
keyid:91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c3:09:9a:2f:34:be:74:ea:6c:ca:cd:58:cd:db:bd:d6:7f:
e6:21:e3:b2:58:cd:a2:9b:9f:ab:f5:03:05:62:7d:e6:9c:51:
fc:98:a1:ef:3b:a8:b3:f2:dc:7c:43:22:a6:44:f7:5d:c3:bf:
9e:2c:80:f9:ae:6e:57:91:0e:cc:c8:4d:3c:68:4c:b6:4c:7a:
35:d7:60:c5:63:60:70:4c:a8:80:44:78:88:a9:5f:80:bc:1e:
cb:07:f1:92:b4:d7:8c:76:3a:cb:5a:bc:aa:d7:b7:83:c1:ff:
4d:49:d3:09:5b:b8:98:fe:dc:a8:8b:a4:25:f9:85:9b:7b:65:
3f:86:f9:7b:18:c0:f6:d5:3e:ae:d1:0d:96:12:e4:7a:6f:20:
e9:a6:87:f7:cb:4d:f3:4a:50:3d:d9:50:ab:67:e4:51:ed:ee:
5e:db:09:ac:85:81:4a:f8:fc:ce:a3:cf:a6:ba:9f:26:45:83:
66:4e:e9:dd:f5:0d:a6:53:6b:91:9a:22:80:ab:c2:f9:ae:a7:
0d:ac:27:66:5b:58:64:59:92:13:0d:ae:df:ef:95:07:49:1f:
e8:04:13:6a:3a:1e:9e:27:a7:00:48:1f:ef:7a:39:0d:bc:b8:
23:03:e5:64:f0:38:dd:3e:b5:bc:98:e6:68:90:6a:75:44:71:
38:ac:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:19 2025 by rpki-client