Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: yuztkBweDY9TdoBUubvzxxjl4DaGsNoBe2YjV5Sc0no=
Subject key identifier: 9D:2F:D0:68:BB:3D:02:90:6A:B6:9F:DC:96:83:3B:45:70:4F:1D:9E
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 0198A084299B65E726C26DA23413CECA9694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0CC1
Signing time: Tue 12 Aug 2025 23:01:12 +0000
Manifest this update: Tue 12 Aug 2025 23:01:12 +0000
Manifest next update: Wed 13 Aug 2025 23:01:12 +0000
Files and hashes: 1: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: /fvBx+ushUQpF5vq6eGdRUx7DmWlwa+Cwzb1s4z/zfk=)
2: Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa (hash: iHt82QR12LPpEvZ7uiS/6X3yVLGKHgczSuxvhMOvlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:29:9b:65:e7:26:c2:6d:a2:34:13:ce:ca:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Aug 12 23:01:12 2025 GMT
Not After : Aug 13 23:01:12 2025 GMT
Subject: CN=9d2fd068bb3d02906ab69fdc96833b45704f1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:7e:fe:0c:2f:b4:b2:28:90:f9:d8:40:6e:
9d:45:6b:65:18:c4:8e:f5:55:7e:ed:0c:66:9f:7e:
ea:79:e5:ce:f8:77:aa:9d:af:83:f4:47:f4:12:6e:
3b:82:61:bd:bd:ea:f6:ca:8a:17:27:96:f9:5b:95:
52:94:89:e2:d0:3d:06:e8:e6:95:f9:4c:74:9d:79:
5d:c8:2b:14:d3:1d:ed:a9:31:aa:3e:1f:d8:04:b7:
ff:47:95:f8:88:9d:21:eb:52:0c:c9:e7:09:79:d3:
17:c5:9a:34:ca:5f:16:2c:b5:2d:89:a8:53:25:71:
4a:ce:de:1f:df:c4:9b:c9:9e:63:73:ed:7f:a8:94:
c8:dc:e4:b2:1d:eb:be:f9:b3:87:34:91:aa:05:1c:
8c:9e:99:9d:26:2a:b2:65:54:6f:20:5f:2e:86:0d:
85:6a:52:d0:d0:e5:c8:1d:30:31:55:0f:cb:91:f3:
32:62:a6:08:e1:65:de:84:99:52:d8:af:ca:1b:61:
db:b9:1d:20:c0:a6:52:ae:40:45:c8:dc:64:41:05:
2c:72:a3:ca:56:79:e3:b5:7a:52:f5:c2:e2:17:c5:
5b:60:eb:97:7c:23:c0:7c:ef:bb:57:30:21:b1:e3:
8b:65:15:2c:a9:a1:ba:59:91:ad:b4:55:43:50:7e:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2F:D0:68:BB:3D:02:90:6A:B6:9F:DC:96:83:3B:45:70:4F:1D:9E
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:41:5a:c5:43:05:53:09:cb:c4:6e:55:3a:d2:3d:61:4e:
2b:3e:39:00:4c:50:42:76:23:15:34:e8:d7:21:c6:ee:03:68:
96:95:75:74:cb:d2:92:34:6a:32:05:97:15:d7:28:83:cd:3b:
f7:62:6c:00:aa:26:86:c2:9e:b2:0d:50:36:19:12:7f:bf:ef:
0d:33:ff:a6:e9:5a:ec:d4:f5:5a:a9:29:93:04:11:09:ff:98:
b6:3f:c0:0d:81:6c:2b:b4:d1:ac:dd:ef:85:dd:fe:27:b5:4b:
c8:60:eb:77:14:8f:cf:91:7c:d5:47:5a:84:2f:b5:bd:60:62:
26:51:e1:60:4d:bc:83:69:13:b7:e7:07:e5:49:30:a9:89:56:
20:4a:2b:f0:fd:9c:02:f0:75:64:8d:c1:04:83:78:88:c5:ad:
56:41:68:e4:37:08:da:42:a5:03:6c:de:6e:ac:2c:42:b4:12:
a4:15:15:25:69:87:ed:14:e8:aa:d2:60:d3:05:41:85:bc:95:
2f:46:31:e7:0c:fd:32:06:e4:3e:56:23:a0:f0:1d:d9:7d:16:
99:15:f1:2b:76:4b:48:65:37:c9:d9:8e:9f:9c:f2:30:1e:38:
5e:47:28:1a:a9:ba:f3:d6:4e:da:8a:fd:a1:4d:6e:87:2f:3e:
32:eb:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:28 2025 by rpki-client