Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
File: kiGxuiPNnBINnmfHS16SkKcq3SA.mft (raw, json)
Hash identifier: sMxgyEOOWXOnhkW/c2QZco/tqJ3BqdeIWw8b/ueN6VY=
Subject key identifier: C6:23:96:E4:0A:84:22:F8:22:38:EE:98:68:8C:8C:6A:A3:58:D3:D7
Authority key identifier: 92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20
Certificate issuer: /CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20
Certificate serial: 0198D583F8AB0410186EDB2F98C016E15AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
Manifest number: 24
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: kiGxuiPNnBINnmfHS16SkKcq3SA.crl (hash: KtzSx1uU1RSC+6wXy9deGnvxFl3TssG8E8u3sqwHJXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f8:ab:04:10:18:6e:db:2f:98:c0:16:e1:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=c62396e40a8422f82238ee98688c8c6aa358d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:99:07:e2:a6:be:9f:21:b0:76:67:ff:bf:
24:b2:7c:9e:05:88:da:a8:38:2e:12:e4:c4:ef:3c:
63:a9:b3:4d:9e:98:a5:e4:b3:bb:56:bb:ce:39:8e:
eb:68:8a:a6:c9:42:cb:9f:e6:ee:79:1a:98:44:f3:
b1:d0:9f:41:75:01:3f:8d:17:ef:b3:f3:64:04:84:
3f:40:b3:89:3e:ad:b3:5f:99:28:08:60:fe:6f:90:
a9:c6:90:52:a2:81:cd:d4:2d:2c:54:a0:42:a9:bf:
c1:a0:25:e5:f4:3b:19:2f:40:c0:66:52:66:68:16:
11:8c:76:50:13:ce:7f:91:ff:c2:25:43:3f:18:10:
56:1b:d0:45:0f:06:34:6d:98:83:e4:4c:33:89:f3:
1c:aa:e2:2e:75:5e:b5:69:d0:6c:e5:a9:1c:20:68:
9a:d9:24:1c:e3:9a:2b:7d:b6:1c:7b:d0:af:a1:7e:
cc:35:4d:be:ed:87:cc:b0:ce:41:14:bc:5e:eb:41:
4c:f3:28:85:92:42:1d:e5:97:f6:71:36:ad:27:ad:
21:cc:e7:ec:58:5f:f0:2d:4f:3d:94:84:2c:d6:71:
79:46:73:c6:15:b5:ea:ae:fa:a5:56:38:b3:a7:f4:
fe:ff:dd:e3:94:4e:8c:73:71:ff:b9:1b:16:1a:c5:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:96:E4:0A:84:22:F8:22:38:EE:98:68:8C:8C:6A:A3:58:D3:D7
X509v3 Authority Key Identifier:
keyid:92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:eb:2a:22:c3:ec:40:bf:45:67:33:60:e7:24:f0:4e:48:
c7:42:e6:2c:1f:e0:19:f4:bf:c7:42:4f:76:33:ae:2c:cf:77:
89:d3:70:55:20:db:f8:e7:53:94:66:58:a3:74:ef:5d:c5:bd:
ac:d6:8a:52:5d:5c:9e:c6:29:68:90:b7:9a:08:fd:70:db:c2:
b5:d1:16:82:d7:e7:51:f9:a9:24:dc:10:04:ac:57:60:01:cf:
b6:98:7c:8c:32:0d:54:14:f3:7f:64:6c:6b:a8:8e:dc:ba:82:
dc:fe:b8:9d:92:0a:94:4e:52:52:f2:0c:dc:52:53:08:12:8f:
f5:9c:de:e9:90:f3:d5:a5:cd:b8:fb:81:4d:03:aa:53:8b:03:
8c:46:ee:53:c3:a8:fa:51:de:f6:c9:c9:ff:5f:ff:35:29:6a:
c5:44:50:7b:09:15:6d:12:44:37:5e:ac:ed:73:59:c5:60:1c:
5a:90:c6:be:09:3b:b9:ad:81:66:d8:23:7e:62:c8:1d:95:70:
f8:91:53:30:6d:7b:ba:67:60:2a:11:ce:60:20:4e:02:7a:c3:
e8:df:ef:b0:2f:18:0e:b1:dc:5d:5f:40:1d:c3:cb:c0:9e:04:
51:20:61:a4:81:3c:10:b6:8d:15:57:5b:89:fe:a6:21:90:66:
09:6f:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:06 2025 by rpki-client