Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: eE99IyjSAyHnxvH3JwrA0j26Aya/XP2lQaV35f2+pHw=
Subject key identifier: 80:97:2A:2D:49:5B:77:5E:51:42:29:77:8F:2F:05:43:8B:15:9B:E5
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 01976A73AA150DDA2CC9CF856B5EBDD7ECEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 071E
Signing time: Fri 13 Jun 2025 18:00:54 +0000
Manifest this update: Fri 13 Jun 2025 18:00:54 +0000
Manifest next update: Sat 14 Jun 2025 18:00:54 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: W3cR/RTWzxoN36RGzn04yVcLLqx78ApBqM1iUybuGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:aa:15:0d:da:2c:c9:cf:85:6b:5e:bd:d7:ec:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Jun 13 18:00:54 2025 GMT
Not After : Jun 14 18:00:54 2025 GMT
Subject: CN=80972a2d495b775e514229778f2f05438b159be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:74:2a:43:60:62:58:ab:b0:26:eb:a6:29:
a4:f4:0a:03:a5:6a:b6:39:f4:59:bd:c4:10:d7:a2:
42:14:36:fc:04:21:27:fa:37:4e:f0:64:7e:fc:e8:
bc:22:af:5b:cf:b6:0c:95:bc:70:c3:33:ff:a0:32:
08:8e:f5:58:78:48:cd:df:43:31:6b:c6:2b:50:26:
76:75:1d:65:74:6d:ee:9c:ba:e9:c3:28:b5:09:6b:
df:79:d6:f6:f5:d0:a1:da:70:35:df:b6:28:3a:37:
35:d2:a3:c9:0f:48:0b:9b:79:8a:bc:bf:e4:b6:b5:
e8:20:e0:6e:c7:e7:8f:85:27:3e:5e:9c:4c:8c:91:
fc:57:4c:7b:e5:10:75:02:f9:2a:23:38:7c:e5:72:
a9:e9:1b:4d:61:ae:11:cc:f5:b3:ad:3d:39:6a:bd:
88:1b:75:d8:29:3d:1e:01:41:dc:2f:11:59:b4:69:
87:a8:e5:dd:83:05:5a:bf:24:60:0a:61:91:a8:86:
f6:cd:29:83:4c:5a:d4:f3:e3:de:bf:ef:ca:a4:0c:
5f:ca:43:7c:93:70:46:54:76:8c:a9:89:e8:39:67:
2a:2c:54:48:42:46:b9:81:fd:08:62:1a:77:2d:62:
a4:e4:6a:eb:8f:17:40:27:50:73:ff:62:dc:2a:0c:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:2A:2D:49:5B:77:5E:51:42:29:77:8F:2F:05:43:8B:15:9B:E5
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:15:27:a0:12:d6:4e:a4:d3:72:ef:3c:bb:fe:5b:0f:91:64:
dd:0a:10:f2:db:1b:2f:92:63:4c:94:a7:ad:7b:66:35:51:60:
c3:fe:00:58:db:c6:05:7c:af:74:86:b4:69:ec:31:1b:a3:a8:
97:10:f7:ab:c9:28:0a:c3:77:4d:55:57:33:42:11:b0:44:a7:
81:26:a8:12:88:23:41:cf:42:66:1a:95:f7:8d:78:fd:f1:de:
9e:18:af:fc:d9:07:0d:42:e7:56:89:d9:9b:1c:f4:f4:ea:fe:
6b:a2:ef:6d:70:d5:55:5e:37:0c:1e:42:45:0a:1f:1a:d4:a3:
c5:47:d2:4b:51:11:8e:0c:f2:da:dc:f5:0c:11:4d:c0:92:0f:
6b:7e:c2:58:36:94:bb:46:cb:8e:f3:82:0c:be:f2:34:76:21:
21:ee:ae:8f:07:2a:02:c6:69:69:7b:e9:26:8e:bc:23:62:c1:
8b:04:6b:be:d4:03:a0:76:af:40:2b:98:c6:0b:b8:97:bd:34:
87:48:f3:85:78:33:2a:c0:3b:20:90:5f:46:a7:15:be:aa:eb:
b0:96:aa:e6:ab:ed:1b:30:81:c6:12:a7:da:10:ba:51:98:c8:
12:7e:d4:3c:13:8f:c3:ae:8c:90:c9:87:a5:c2:9c:cf:96:db:
fa:13:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:46 2025 by rpki-client