Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json)
Hash identifier: pLNJQvsDn2C/klpnA7ig8Z4ksn+NMl/WYQPLabwuA4k=
Subject key identifier: 68:BF:90:5D:E4:5C:3D:90:97:63:5D:49:0D:F7:EC:6E:C4:07:D6:DB
Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Certificate serial: 0198D5BC13BF0039B8ACC18130E1764F66DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
Manifest number: 13EF
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: ySEHfkPCEZX1BVy8gIJFBksErR/fyBzs7yZpAyDsGbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:13:bf:00:39:b8:ac:c1:81:30:e1:76:4f:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=68bf905de45c3d9097635d490df7ec6ec407d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:f9:cd:f4:43:3d:bb:b3:93:ec:35:3a:e5:
0c:4a:57:cf:04:de:5b:1b:44:86:19:ae:73:f4:e1:
ee:e0:f8:c7:a5:52:16:f9:82:75:2f:dd:60:c8:ae:
fd:66:a4:c2:21:5c:8d:ad:fd:59:2d:9f:30:9d:1d:
f0:b5:8e:f7:0e:94:b9:be:0c:c9:b7:d3:dd:96:7f:
c5:39:e6:08:f1:a0:33:91:b0:05:d4:28:a8:08:c7:
ab:69:48:81:5a:1a:6a:27:6c:ba:6c:35:7b:37:32:
10:f5:14:df:29:59:b0:fc:3f:02:6f:c0:98:64:e3:
c2:44:75:eb:c7:03:f0:39:ef:e6:6d:ec:92:bf:3f:
9f:5e:51:47:a7:26:56:9e:e2:cb:d6:fd:68:2f:00:
69:b9:29:65:56:9e:d2:7b:e9:70:44:2c:8d:71:a1:
18:eb:fb:01:2d:15:32:f6:18:04:7c:a8:8f:71:7b:
1e:8f:80:2b:ef:2b:f0:39:41:fd:75:28:d4:25:c0:
25:55:f2:09:c9:e0:f7:7b:c4:8d:79:6a:45:af:32:
55:52:6d:c1:80:09:b5:0e:88:49:a2:43:68:0f:d1:
88:0b:dc:13:33:24:f7:f2:32:84:be:db:e4:1d:69:
41:7e:db:e4:00:13:33:33:b2:ec:5b:9e:83:8c:9f:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:90:5D:E4:5C:3D:90:97:63:5D:49:0D:F7:EC:6E:C4:07:D6:DB
X509v3 Authority Key Identifier:
keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2b:cc:83:ac:1e:0a:86:10:98:25:1a:9a:f0:79:f8:6b:73:
73:56:c5:14:cb:b5:28:d9:1e:4d:52:80:b7:a1:18:7f:c3:d6:
de:b4:e5:bf:e8:9e:d2:bc:74:8c:f8:11:06:39:35:4b:06:b7:
67:97:5b:ee:a6:f8:ab:2f:50:46:a8:93:dd:91:71:a7:a3:e1:
ee:2e:36:b1:55:a9:bc:2b:6e:bc:5e:3d:03:4f:f5:85:8d:1c:
3b:f0:c3:95:d8:40:70:fb:32:8f:0d:8b:5d:db:a1:33:bc:fb:
72:93:94:07:e6:94:81:6d:15:f7:3e:25:66:dc:73:2c:e2:6d:
f9:ff:7f:7b:8f:35:80:60:e1:db:be:21:3f:67:50:07:f7:5f:
e3:46:58:69:96:5a:7c:b8:59:d2:f1:70:5a:fa:f1:98:c0:a3:
5f:a6:9f:92:66:b4:ff:30:f1:c5:d9:61:46:f9:03:10:c0:35:
41:17:eb:29:64:e5:c7:6f:ee:08:69:3d:6d:a3:1f:9e:40:51:
6c:bc:4c:c3:b6:08:6a:db:23:2d:bf:d5:79:e5:c2:c7:9e:0f:
f9:02:03:77:04:c3:63:5c:dc:7d:4e:73:2f:33:ff:a1:5a:24:
c1:d2:42:62:e1:37:fd:79:85:9e:6c:ed:fc:e2:de:16:8e:ab:
a3:25:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:55 2025 by rpki-client