Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: zU1NM6b5M3mAFJohkX0M4EMhc0mZK73Vjegd6UyPuwY=
Subject key identifier: AE:40:C2:6C:D9:4D:6A:C9:83:4A:0B:79:51:50:27:01:99:EF:B3:F8
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 01987D8B393BB01C3D65C814608AD51DB744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:12 +0000
Manifest this update: Wed 06 Aug 2025 04:02:12 +0000
Manifest next update: Thu 07 Aug 2025 04:02:12 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: 32e1QM4z/hNnz6tLomCWBYbRI1fMNfRJblPBBvdrUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:39:3b:b0:1c:3d:65:c8:14:60:8a:d5:1d:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Aug 6 04:02:12 2025 GMT
Not After : Aug 7 04:02:12 2025 GMT
Subject: CN=ae40c26cd94d6ac9834a0b795150270199efb3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:90:c5:f9:b8:b6:d7:79:94:66:d8:48:59:
e4:88:06:4f:ed:de:71:cb:2e:a5:fd:35:49:c0:ba:
47:ed:38:51:ef:5d:2c:1a:9f:01:eb:e6:af:b6:61:
a7:fa:c5:b2:d7:d6:b8:9e:87:b5:d2:2e:6f:64:f6:
c1:f0:86:e9:a7:2b:b1:1a:15:f5:d3:6e:8e:ed:66:
b4:b2:a8:56:c3:c6:81:f4:0e:9d:fe:41:68:3a:d0:
a0:c4:92:47:f6:5b:d6:9b:3f:a4:b9:dd:73:8f:94:
44:a9:18:08:d7:18:53:01:b7:15:b4:9b:66:ba:23:
68:b9:d2:d3:25:81:e3:d6:3c:de:eb:e5:0a:c3:bf:
46:66:c2:e5:7c:f3:5a:13:83:3a:47:8a:51:a7:5e:
4a:4d:f0:82:99:da:ef:2a:dc:1a:ad:dc:20:8b:b4:
24:45:0d:bf:60:f5:28:2f:99:4c:e0:1b:38:03:c6:
de:f1:3c:ab:cc:f7:5b:55:17:87:a5:7f:6f:ef:39:
35:f4:0a:50:eb:7d:de:02:8a:41:74:45:5e:12:53:
ae:71:72:2c:25:fa:e5:14:25:cd:4d:16:27:3d:33:
80:81:1d:0e:b7:55:62:29:c3:45:f0:6b:0e:db:75:
40:53:ae:65:aa:6c:52:a5:8d:11:e1:d2:c2:42:79:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:C2:6C:D9:4D:6A:C9:83:4A:0B:79:51:50:27:01:99:EF:B3:F8
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fa:f7:5e:9a:9e:a8:cb:74:3c:1c:4d:b1:bf:5d:e6:de:a0:
05:45:cf:ca:ce:5b:b8:58:9e:bd:e1:58:aa:be:be:66:ce:c4:
3e:9b:f1:10:1c:04:3d:59:11:2b:13:38:93:eb:c0:d1:d4:9d:
39:73:3d:92:0f:ce:80:38:79:32:c9:17:f7:e9:11:0e:52:de:
ec:11:2c:89:cd:8c:55:b6:09:55:f0:bc:eb:bd:f9:02:c9:89:
10:07:62:b3:9e:42:a4:b3:e8:b1:11:6f:99:ca:13:9f:47:be:
a2:9f:f3:e8:93:4e:2d:df:88:d1:e8:0f:02:1d:ed:9b:22:4c:
99:7d:b8:98:77:58:6f:c4:ba:21:43:67:8e:60:a1:b6:34:09:
b6:43:cc:78:8c:88:42:f2:12:fb:57:46:6d:58:be:05:53:5a:
30:29:eb:a5:36:16:35:72:de:7c:9e:3e:bb:eb:73:cc:c4:f5:
f4:22:fd:22:77:c6:6e:53:e5:93:ef:cc:7d:af:33:2e:90:41:
17:f5:6f:f5:26:3b:4a:f8:ee:f1:3c:8a:da:05:4c:d8:55:ee:
5d:a6:7e:78:12:4e:56:f0:db:e1:83:40:20:be:28:56:7b:6e:
0d:9d:8e:ac:33:08:a6:60:c1:af:6e:67:58:b9:77:2f:43:6a:
a6:e0:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:33 2025 by rpki-client