Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: tcCLZepSzo2ai3h5eGqZCdC1AETdFOHqX0dEQlebwzk=
Subject key identifier: 48:A0:A6:58:B6:BA:46:E7:0E:51:7B:59:F0:AB:E8:C6:E7:2B:8B:AD
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 01976F2C127086F5A99614817AE0C52B8FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 16:00:48 +0000
Manifest this update: Sat 14 Jun 2025 16:00:48 +0000
Manifest next update: Sun 15 Jun 2025 16:00:48 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: 41A5nKylLqt6UM2JDyFbopIixOI5CLVxGUci6mxVgkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:12:70:86:f5:a9:96:14:81:7a:e0:c5:2b:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Jun 14 16:00:48 2025 GMT
Not After : Jun 15 16:00:48 2025 GMT
Subject: CN=48a0a658b6ba46e70e517b59f0abe8c6e72b8bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:87:a6:78:09:e8:64:e8:bf:41:3a:f7:e7:
ee:8a:77:89:05:96:2c:8f:7a:5a:da:64:02:37:4e:
a5:9c:86:8e:9d:e0:af:ca:4a:ac:ba:78:c7:b5:90:
06:b2:4b:92:9f:75:26:ab:78:90:80:90:c9:48:52:
9d:7d:c7:2d:8f:b3:20:03:72:d7:61:d0:54:67:23:
ba:db:74:05:8c:7e:f9:be:7c:82:2b:fa:33:3c:25:
97:ae:bd:d4:45:58:92:52:9b:92:6e:87:1a:33:fd:
48:60:5f:d6:6a:b0:d3:c2:67:44:94:33:e9:46:ca:
a0:7d:d0:9d:d5:48:6d:c4:cf:62:31:96:eb:2b:42:
55:ff:a0:6e:ba:04:0a:7e:ed:4a:09:32:ed:05:98:
75:5c:58:64:5a:cc:ac:f1:60:e1:b4:3c:10:d4:83:
c8:63:fe:88:99:7d:a4:3a:ff:1d:13:10:b7:08:a4:
5a:9d:c0:e8:cf:90:ee:c4:d9:a2:d4:ad:17:d4:f4:
4e:e3:62:b2:c3:9a:a1:5d:db:f5:99:17:14:52:6e:
7e:6c:e0:e1:26:4d:69:30:08:e5:78:9a:4c:54:a7:
7c:22:ed:d7:90:d2:fb:52:78:c2:bd:6b:cc:4f:8e:
0e:f3:b8:e6:e0:2c:16:63:12:9d:40:8b:29:24:f0:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:A6:58:B6:BA:46:E7:0E:51:7B:59:F0:AB:E8:C6:E7:2B:8B:AD
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b2:9b:19:91:33:55:44:c9:7f:3b:f5:3f:f8:24:7d:42:98:
e6:eb:f8:b3:be:ae:42:14:28:6d:07:ea:db:b1:53:e4:e5:08:
0c:0e:95:3f:1e:3d:91:aa:e5:b8:26:63:9b:f5:79:b9:58:89:
b8:56:ce:88:8a:34:ab:5a:4f:aa:fd:4f:ac:05:f7:cf:33:6e:
c2:90:3d:97:2e:cb:2a:b5:ec:55:6c:10:71:17:68:ca:38:d5:
48:4b:41:24:27:91:c8:a5:f9:ac:ab:bb:7e:6e:a2:c4:d9:65:
0a:c9:d6:e9:06:d7:8e:b8:18:9b:41:5d:50:59:35:01:ea:a7:
0d:d4:97:74:c7:6e:c7:1e:28:94:e1:6a:ff:39:f4:8c:66:b2:
6c:3d:92:12:30:a3:3e:2a:4a:99:96:40:7d:aa:ce:0f:19:95:
d0:55:5b:27:a4:8b:b6:60:f6:33:c3:cd:67:91:06:d0:83:5c:
46:72:6f:4b:c5:fb:db:d9:bf:5c:0c:3f:03:b6:e3:6f:e1:67:
7b:c9:4f:45:86:eb:48:c8:8e:c0:8a:50:4f:e1:d2:f2:ce:07:
e2:b0:50:c6:54:a7:71:07:5c:d3:42:77:ca:60:70:f6:55:d5:
2c:fd:6e:30:ad:1f:20:21:bc:7e:ee:04:a6:a6:31:25:aa:ae:
ab:5b:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:44:46 2025 by rpki-client