Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier: F8Dw26oiXSHd7kfabZlD6CMYORdkrzNptfjeJ3ENKcg=
Subject key identifier: 4E:78:7F:A7:EF:A6:05:75:1B:66:EA:4A:EB:61:87:39:28:21:AD:14
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial: 019894B77695AB89A020C5BDEF036796EC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number: 07E8
Signing time: Sun 10 Aug 2025 16:01:48 +0000
Manifest this update: Sun 10 Aug 2025 16:01:48 +0000
Manifest next update: Mon 11 Aug 2025 16:01:48 +0000
Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: zZ0LKHpeAL9fwFE8DCbLaxDfMfx7L5l/VViISNYLH+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:76:95:ab:89:a0:20:c5:bd:ef:03:67:96:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Validity
Not Before: Aug 10 16:01:48 2025 GMT
Not After : Aug 11 16:01:48 2025 GMT
Subject: CN=4e787fa7efa605751b66ea4aeb6187392821ad14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:22:3e:67:72:6b:59:c3:26:f1:b8:47:b2:
3e:c6:57:62:1c:bb:d7:0d:cd:5e:b5:67:50:0b:03:
8b:e7:e7:29:12:7e:2e:28:4c:33:a5:d4:50:7e:e9:
49:be:f5:e2:49:60:a6:fa:a9:64:15:fd:57:8f:44:
cb:f7:0c:55:88:3e:4c:83:63:d0:6f:56:be:87:2c:
f7:56:26:3c:fd:98:e6:c7:dd:95:fe:a0:fe:7b:20:
99:ed:0b:c8:a7:d9:58:5c:b9:a6:c2:bb:90:67:a6:
a7:e9:bc:5c:5c:d1:9a:55:cb:3a:ef:03:2f:98:56:
e2:68:da:ec:74:91:0b:a8:8e:e1:83:b8:c9:d6:b2:
f9:7a:fb:4c:3a:25:1a:94:33:9e:90:2c:cc:65:d4:
7c:4d:b4:2c:20:17:72:53:64:93:42:65:05:d5:0e:
07:6e:ab:e0:3b:38:53:4a:c2:36:b1:80:c5:ad:98:
bb:fa:bb:4d:e2:b8:8a:45:9c:82:d2:80:f4:3a:83:
19:a5:72:0e:4d:6c:ad:c9:bb:02:0d:9a:d9:4b:0d:
37:9d:1b:e0:9b:1c:49:0c:f4:e7:62:f6:32:2b:c3:
5b:18:b6:7d:97:79:fc:9a:c2:d3:c4:02:8a:58:16:
b6:03:3d:2b:76:fe:c9:fd:2e:3b:75:71:c4:93:66:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:7F:A7:EF:A6:05:75:1B:66:EA:4A:EB:61:87:39:28:21:AD:14
X509v3 Authority Key Identifier:
keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:6f:d3:bc:56:95:8a:e8:14:25:f4:ff:1b:1b:91:58:a7:
79:4e:9f:89:53:dd:07:ad:75:a4:87:93:6f:ab:91:bb:5a:f1:
2f:24:1a:b7:08:b6:0d:75:3a:fa:bd:d2:7e:46:a7:88:84:a5:
3b:56:23:79:59:a2:68:01:9d:2a:5a:20:6c:7a:83:3b:fe:6b:
e2:77:5f:88:4c:f1:dd:89:a2:06:f4:c4:09:d6:5f:78:49:97:
34:0f:f8:8d:d6:2b:d7:99:67:b6:73:7c:df:50:32:79:f2:18:
79:4e:5c:a4:30:30:c6:fb:4f:6b:08:76:fa:6b:5b:ee:b7:29:
32:ac:5b:31:07:1f:27:80:97:09:6e:bd:c7:02:61:39:c0:2f:
f4:67:cc:1a:07:da:76:9e:46:30:5d:58:34:db:6f:c5:42:e5:
1c:99:d5:41:a7:17:44:b7:96:5e:bc:88:65:b4:af:0d:aa:ac:
9f:0b:c3:83:5a:4b:60:84:c4:c0:1b:bc:75:d4:26:6f:62:aa:
c1:6d:65:6a:c3:ca:3a:d2:d5:54:30:62:18:80:d6:a2:00:03:
f9:ea:5d:73:b8:70:ed:be:bb:42:6e:99:b6:d7:a3:92:0e:55:
4e:69:33:e9:4f:56:d3:dd:86:26:b9:dd:19:09:f2:d9:e8:f2:
3f:2b:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:48 2025 by rpki-client