Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: j4wcq3fcDBr7cV1ab3vbjDwktF44rGxyfKlRkF1t/yg=
Subject key identifier: 09:64:4A:91:9A:61:04:3A:79:07:B1:A4:B5:9E:B0:61:81:E0:61:74
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 01989F71666EED9F20D7104E75E01013A6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 07BE
Signing time: Tue 12 Aug 2025 18:01:05 +0000
Manifest this update: Tue 12 Aug 2025 18:01:05 +0000
Manifest next update: Wed 13 Aug 2025 18:01:05 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: xEH5dAzSXDwKmJEAXQ3Hir2c99FYjcj5QDEFDq5S4QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:66:6e:ed:9f:20:d7:10:4e:75:e0:10:13:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Aug 12 18:01:05 2025 GMT
Not After : Aug 13 18:01:05 2025 GMT
Subject: CN=09644a919a61043a7907b1a4b59eb06181e06174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:73:18:87:0b:09:48:58:b0:2e:b5:b0:b6:
25:4d:b2:6c:68:6e:70:74:9d:4a:0b:c1:2f:65:15:
64:48:f8:2f:a2:95:89:3e:ad:fd:32:8d:98:e7:c2:
8f:d6:10:1f:89:6f:e4:39:5d:38:9f:df:dd:7f:cf:
0e:78:8f:03:9b:d9:4e:ca:15:67:c1:21:65:d3:c1:
57:38:a1:f4:cb:95:cf:ae:50:a9:47:ee:98:f5:e5:
91:ea:93:a3:6e:0c:ad:8b:d7:05:20:d6:30:09:5c:
87:66:cb:1b:96:b7:05:02:68:ba:51:fd:c5:b0:e2:
4b:39:53:cb:aa:2b:0a:b9:9d:b5:aa:9d:76:06:88:
9b:23:5a:e1:d1:31:28:c1:f3:8f:94:8e:7f:09:28:
ea:e3:c6:31:77:bf:1e:ab:30:4d:99:2c:ee:04:b0:
da:c8:2c:02:dd:d8:04:47:d6:15:71:9c:52:3f:f0:
45:f7:a4:30:ae:2b:cf:76:2b:db:e8:78:b4:04:20:
9a:fb:a3:d8:8f:6a:c5:3b:66:bf:3f:45:eb:20:62:
c3:31:ee:e0:32:93:ff:41:ed:a2:36:d9:26:b0:8d:
38:7b:ab:12:d2:f2:19:d4:f7:aa:e7:da:21:8f:0c:
e5:01:1d:34:9d:f2:ff:78:e2:ed:a5:e5:03:17:c8:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:4A:91:9A:61:04:3A:79:07:B1:A4:B5:9E:B0:61:81:E0:61:74
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:16:a7:8a:47:18:fb:d7:e2:e6:c4:a2:19:9d:1c:f0:45:
ed:ac:70:e6:66:15:59:c0:0c:78:c0:48:f8:fa:f8:69:a3:14:
0a:4b:60:df:5c:3a:5a:6d:7e:b5:42:98:61:0a:4f:7a:a4:93:
d8:21:e1:23:ae:14:45:fc:27:cf:5c:eb:66:1f:28:1d:32:4c:
36:c6:27:9a:3f:16:bf:ca:87:93:b1:f3:7d:6b:4b:1b:88:02:
85:3d:96:15:d3:60:db:93:38:e5:d0:96:a7:5c:6b:f8:46:95:
92:18:7a:62:ec:ec:f0:f2:eb:bb:ed:f4:08:14:48:01:d4:49:
48:9f:56:de:67:9c:41:7b:9e:b4:63:aa:85:bb:4e:10:44:9a:
d8:a2:c8:9c:53:75:b2:9b:f8:33:18:5c:5b:42:01:5d:0c:3e:
92:be:9c:bc:41:58:1d:1e:09:78:5d:40:6a:3f:a0:39:fe:d7:
39:0a:2f:78:e0:75:4e:c9:5d:17:80:82:24:f4:67:ce:08:1a:
98:46:3c:31:b6:2c:44:50:73:92:93:5e:6f:f4:26:be:7d:60:
21:64:c4:86:8c:ae:03:4d:8a:ff:79:20:cd:5b:73:70:74:f6:
5e:b0:84:d3:6f:a3:71:a5:5a:80:9c:cd:4c:bd:9c:a7:67:7b:
9e:ef:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:52 2025 by rpki-client