Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: qfUC3eXknNvHXc0u/rfotfsTnd9fJeP620GhYLEVW4s=
Subject key identifier: 73:42:30:AE:2C:B3:78:E8:FB:4D:37:86:09:3C:E2:23:88:3B:93:6E
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01988E0F575A4EA6F532B89B35B92B0F45C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 06FB
Signing time: Sat 09 Aug 2025 09:00:26 +0000
Manifest this update: Sat 09 Aug 2025 09:00:26 +0000
Manifest next update: Sun 10 Aug 2025 09:00:26 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: xZc7qA77kN+mmTmhaSQcsT3bdYUOsv3HUdXGlCFN0BQ=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:57:5a:4e:a6:f5:32:b8:9b:35:b9:2b:0f:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Aug 9 09:00:26 2025 GMT
Not After : Aug 10 09:00:26 2025 GMT
Subject: CN=734230ae2cb378e8fb4d3786093ce223883b936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:29:d4:a6:5b:46:34:78:49:aa:7a:4e:ab:
94:e6:37:59:3c:f7:94:9e:6d:74:c1:b4:66:e1:ba:
14:b4:dc:fa:e0:5b:d6:81:ee:ec:4e:6b:18:2b:3c:
58:65:fd:f2:94:67:14:e8:b9:cc:89:46:fc:3e:97:
46:94:a6:a6:9f:57:8b:a7:d2:eb:95:a1:35:46:30:
90:e0:bf:79:a1:ea:d3:c2:cf:8e:91:40:fc:cd:42:
3c:77:c1:66:b2:41:06:ef:52:93:6a:9b:e8:c6:4c:
ba:50:34:77:1b:47:af:24:e3:1e:94:d6:7c:4f:dc:
65:d6:ea:47:a4:1a:46:88:68:e8:55:ee:6d:78:10:
f1:8a:3a:ec:e2:4a:7c:b9:f4:88:79:28:85:f6:2c:
be:9c:bd:2a:da:c0:47:2e:9d:72:31:e7:35:01:60:
bb:be:f7:af:5c:79:81:4b:85:2e:57:9b:ae:4f:91:
a7:b5:68:39:49:a6:07:b5:67:a2:1a:3c:c7:3b:dd:
d4:96:2c:0d:46:d6:c6:77:65:0f:6c:bf:a4:6e:55:
9a:b8:62:fe:a5:c3:2d:ba:69:bf:5c:c4:08:52:34:
01:37:56:4d:d5:4f:64:56:83:76:b2:60:16:07:d6:
c6:95:61:de:9c:e6:af:cb:ef:22:f3:5b:dc:a9:b4:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:30:AE:2C:B3:78:E8:FB:4D:37:86:09:3C:E2:23:88:3B:93:6E
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:5e:4f:fd:af:52:e8:24:5b:1c:a9:97:41:8d:5a:05:40:
a6:28:83:78:2b:c9:9a:7d:30:7d:27:01:75:2d:4d:dc:c2:e4:
d8:f2:2b:44:5d:40:ed:b8:5f:6a:08:1f:68:97:ee:4e:a7:00:
74:26:48:61:31:a6:e1:c7:e5:c5:0f:4f:02:e8:86:af:b1:9a:
4d:d1:29:c2:28:09:34:bf:7f:72:6d:f6:c0:a9:93:93:5b:b5:
ff:5e:b9:69:a2:db:8d:3d:f2:2e:c4:c2:31:45:87:62:fd:6d:
91:c0:5c:ba:ce:ee:c4:10:84:60:d4:1c:31:56:05:c6:e3:98:
91:17:ed:b8:45:89:05:51:c0:47:ec:b2:a6:1e:f7:36:19:62:
45:d6:e2:dd:ad:43:be:d2:5b:95:22:06:0e:9f:64:fc:65:29:
5d:e7:c8:5e:b5:d9:22:0c:22:80:c2:79:2c:cd:7f:65:32:33:
ae:c5:1f:22:5e:6b:93:9a:68:7b:71:bc:98:0a:9f:57:cd:74:
44:88:1c:4d:13:5d:23:ea:b6:dc:91:b0:e4:3e:d5:77:50:c0:
a0:63:b2:46:e1:25:61:44:d3:07:7a:5a:d1:d8:c4:92:7e:08:
79:30:47:47:dd:69:e2:44:9a:9a:d6:f7:a4:be:dc:90:78:65:
12:41:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:44 2025 by rpki-client