Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: 8RJXVoDWrW2rvBX5MvLx5baa+03pj3Mr4xgjJsynlw4=
Subject key identifier: E4:88:07:DF:9F:E9:E5:AB:FC:3D:8C:13:31:25:0F:8D:C6:0A:0B:B6
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 01989712D5DAE4CB486119B0A7C25BDC4B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 091E
Signing time: Mon 11 Aug 2025 03:00:50 +0000
Manifest this update: Mon 11 Aug 2025 03:00:50 +0000
Manifest next update: Tue 12 Aug 2025 03:00:50 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: OtHUDNBxaMU+kPGyViRufndPLlb/ezx0yUm+e9IBPJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:d5:da:e4:cb:48:61:19:b0:a7:c2:5b:dc:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Aug 11 03:00:50 2025 GMT
Not After : Aug 12 03:00:50 2025 GMT
Subject: CN=e48807df9fe9e5abfc3d8c1331250f8dc60a0bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:23:13:21:e2:c6:a2:03:00:db:c3:fd:e5:
e7:4d:02:ea:dd:41:f2:c7:de:b1:d5:c9:20:fa:b0:
1d:99:e1:5b:6f:9b:4a:56:65:32:da:81:7c:8c:17:
96:69:5a:ec:18:6d:60:bb:dc:f6:70:c8:bb:00:67:
f6:29:5d:5b:86:e1:96:77:d5:33:fe:f9:52:cb:db:
f5:f5:8f:61:95:ce:a2:d2:02:9d:16:26:89:e4:e4:
fd:8a:32:dc:50:59:be:fa:ef:55:98:7d:5e:d6:b9:
91:c8:59:6a:70:53:c9:d7:f7:bc:31:b9:ee:b5:bd:
d7:e9:ae:b0:91:1f:d0:dc:f5:83:c1:36:cd:32:c8:
8b:cf:7a:ed:a9:63:51:9f:ee:f0:09:ba:5c:ca:f5:
59:be:fb:88:b4:f6:23:27:6a:8c:bf:86:38:9b:17:
5f:9f:9b:21:65:5c:b6:e7:0f:12:7f:5f:1c:24:2a:
df:e0:b1:f2:b1:7b:91:8f:07:ea:0b:a0:45:08:d5:
74:5f:d1:4d:fc:de:a1:6e:7e:19:19:1c:a9:c2:eb:
92:6e:e4:c9:3f:e8:8a:3e:20:fc:b8:98:c0:99:2e:
ee:fa:fd:b3:a8:9c:51:86:6a:72:33:cb:41:6d:a9:
ef:ed:c0:ef:42:08:4d:5d:6b:3e:b5:94:14:6d:c1:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:07:DF:9F:E9:E5:AB:FC:3D:8C:13:31:25:0F:8D:C6:0A:0B:B6
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fa:fb:f7:0c:f8:4f:80:11:1a:17:24:4e:ba:71:15:9a:c8:
2b:b4:22:42:58:8c:68:15:eb:9b:24:91:59:a2:d7:61:08:f7:
39:0a:6d:9e:58:21:60:98:f8:a9:37:4a:b7:12:df:12:f8:00:
19:9b:3d:11:0b:90:07:32:1d:3d:32:5a:8f:0d:d1:62:26:ef:
1c:b1:a2:6b:ef:69:33:9a:9c:50:04:7c:ea:3c:82:c7:ec:c5:
e0:8d:71:85:db:80:0a:bf:e3:6c:74:9a:03:23:db:3f:5d:3d:
6c:2c:6d:3b:c4:b5:90:8a:f7:29:86:a1:55:48:b2:17:75:8a:
f9:99:68:5c:dc:c9:08:90:f2:f8:f2:59:a4:dd:6e:ce:94:a8:
0d:58:36:92:af:38:c8:63:1f:59:1f:01:60:8c:97:f9:e4:19:
11:6e:a6:69:8e:a2:8c:b3:57:60:64:ee:0b:5c:bd:b0:b3:58:
48:a3:bf:7f:a0:d5:52:bc:d6:fa:26:cf:15:ce:32:4b:d4:33:
3c:0b:bc:2f:d1:3b:14:18:81:52:69:42:3f:f9:a2:ef:0d:ad:
7b:32:2c:8d:9f:ed:48:b8:25:81:b6:7b:31:cd:d4:31:01:e2:
74:1c:9a:70:52:ca:c4:6b:07:14:0f:0f:e5:61:c7:ba:80:9e:
e6:0b:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:49 2025 by rpki-client