Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: yyYWlvaZ7R32VYY2zWiS3LpofW0j6JFzWV59a9GKAZA=
Subject key identifier: E1:65:70:98:19:9C:AA:9E:76:3E:D4:60:51:B5:2C:EF:EA:F9:D5:00
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 0198835751F102FA2B1913A88EA6E2F457F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0603
Signing time: Thu 07 Aug 2025 07:03:14 +0000
Manifest this update: Thu 07 Aug 2025 07:03:14 +0000
Manifest next update: Fri 08 Aug 2025 07:03:14 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: 7uJtZKL7rCOFQtcWvMiS50THjj1Qog+ugsD2jvgztAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:51:f1:02:fa:2b:19:13:a8:8e:a6:e2:f4:57:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Aug 7 07:03:14 2025 GMT
Not After : Aug 8 07:03:14 2025 GMT
Subject: CN=e1657098199caa9e763ed46051b52cefeaf9d500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:d9:0f:27:08:13:e5:25:a9:e2:87:3c:a0:
25:58:6f:ee:b9:1a:e7:79:95:aa:bc:2d:46:15:3c:
69:06:cb:c5:0d:3e:dd:d8:a0:f1:4b:0b:a4:b4:32:
98:0a:16:b9:ce:a1:d7:1a:ed:d2:16:b3:7b:e3:ef:
5d:f3:d0:c4:c2:cf:54:ca:37:c2:fe:df:00:56:0b:
03:ef:2f:80:23:01:a8:84:58:bd:d8:54:e7:8a:96:
85:01:c8:5b:6f:51:a1:7d:f9:77:e0:82:83:02:3a:
ae:b3:28:13:91:86:71:08:1b:32:4d:64:25:ee:fa:
a2:35:ae:6d:93:65:97:31:36:99:6d:8f:09:9a:7d:
b6:61:c9:d8:27:1d:a8:38:48:ed:df:f2:be:4c:5b:
05:17:3d:17:61:07:13:5d:40:42:69:21:a2:24:28:
5c:b1:2a:fe:a3:0d:92:b5:16:34:2c:a9:14:88:eb:
d9:33:a1:12:94:bd:53:8a:fb:03:96:b8:84:0f:cc:
42:fd:f7:57:85:44:ab:f4:6c:90:a3:40:27:07:30:
ea:e6:e9:8b:78:b9:53:b7:64:22:29:f9:87:42:1a:
0b:96:08:cb:ce:2d:14:82:cd:17:2f:4f:83:14:26:
5c:d8:df:12:fb:15:89:82:e9:d7:69:f7:23:1e:85:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:70:98:19:9C:AA:9E:76:3E:D4:60:51:B5:2C:EF:EA:F9:D5:00
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:25:92:88:b1:8d:04:43:db:c8:22:d3:5b:59:19:ac:97:
30:8b:79:1f:5c:a6:83:17:44:60:d2:36:76:85:17:01:f9:78:
56:11:c1:28:d2:36:aa:1c:60:94:60:bb:e4:e7:60:f1:da:74:
78:c5:ec:1c:35:c3:8e:2b:02:8a:4d:b1:44:a8:18:ea:ca:80:
7c:29:54:ab:9b:b0:c4:0a:df:2c:b4:2b:cc:ca:23:cd:d9:34:
10:8c:47:3a:cc:63:f2:c7:5a:db:c2:7b:cc:f3:8d:48:7c:ff:
dc:ad:81:7a:41:c0:8c:93:da:61:f6:3e:a5:03:20:7a:37:3e:
dd:22:33:9a:73:f7:69:b0:10:8e:ea:cb:82:98:4e:18:a7:58:
7b:16:b2:94:81:95:ee:75:1b:f3:7e:e2:b7:19:a9:f8:69:ce:
a5:4d:27:b7:ef:17:00:f5:2c:96:a3:7a:cc:c8:a0:c8:8f:71:
0f:03:d8:53:42:fe:95:17:ee:c7:99:ea:d4:47:e6:32:00:2f:
7a:fd:dd:c2:09:e1:40:84:f2:21:32:e4:8d:73:e4:f2:2e:aa:
3b:b3:4e:be:72:13:d9:ef:cc:f2:7a:8c:da:6d:b1:7d:0d:39:
b3:6f:bf:27:9a:0c:c5:51:09:af:bc:14:d1:ca:79:a8:61:0a:
cb:b5:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:31 2025 by rpki-client