Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: ZCqmsYxyTcZffzFPkW6uBcqUBkTVKrVnd+MacFa5DQc=
Subject key identifier: 7A:3E:7F:91:30:F9:DC:6E:3A:29:18:9E:58:06:1E:FD:A1:42:0D:8F
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 0198D4735AB9162D01FB91CB4E490D5EF70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: Xp3T1702U3ml7bXdGgPp4pr13oRG6AoEcD9Ln35s/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5a:b9:16:2d:01:fb:91:cb:4e:49:0d:5e:f7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=7a3e7f9130f9dc6e3a29189e58061efda1420d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:7b:ee:7d:88:d8:c0:7b:ac:59:9c:2b:6b:
df:d2:4e:3e:11:8d:96:7a:db:0a:69:db:7c:74:1a:
2e:54:2a:b8:43:62:ed:89:15:2f:45:c8:9b:ca:44:
74:69:3a:7d:4f:e7:b2:be:50:d4:30:aa:39:6e:1c:
6e:97:28:da:2f:a0:07:d4:39:e2:61:e2:c2:25:11:
02:34:bf:77:87:f0:11:a9:c3:7c:ee:d6:ff:ac:c2:
08:e6:07:30:af:72:81:7b:79:89:5c:a6:17:87:99:
11:90:23:27:40:2a:d2:c8:de:ea:6e:64:67:da:12:
58:bd:b8:39:26:58:b7:46:c2:10:ff:f6:4a:a3:5a:
66:de:a8:83:d3:e7:0a:26:57:fa:ba:80:dc:1e:c1:
52:3e:62:39:46:da:d4:26:a1:39:75:d9:23:dc:a0:
42:2d:bb:de:4b:98:3a:7e:c0:0f:a2:ba:03:6c:71:
8d:52:dd:d8:19:09:fe:e2:55:3d:7c:26:d0:28:b0:
54:79:2f:87:72:29:f3:c5:19:64:23:79:fc:a3:91:
8a:05:91:c6:ac:b3:a3:19:d1:c3:0d:d7:d3:b9:ff:
d7:f1:4e:8b:93:58:84:7b:8b:fe:a9:8a:47:f6:20:
01:c0:12:c7:07:ff:2c:e5:40:2c:6a:83:10:9e:76:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:7F:91:30:F9:DC:6E:3A:29:18:9E:58:06:1E:FD:A1:42:0D:8F
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:41:27:c6:fc:f1:9a:e0:cc:cb:a1:ee:2d:e9:ba:81:fd:
db:5e:42:cf:ad:21:d9:3d:89:a0:f0:53:0c:1f:97:04:f3:2b:
f4:bf:47:5c:e3:6d:2c:87:bc:5a:35:e2:56:d2:8e:ce:77:45:
92:0b:ef:81:87:48:ce:85:d8:21:98:f5:d1:2a:e9:2c:fb:53:
f1:4d:32:91:9a:88:e0:ec:59:e3:38:f3:c0:bb:5d:fc:f9:97:
cb:22:ba:84:da:52:51:fb:a3:6d:9c:6e:6b:cd:9e:00:3c:1a:
2f:51:d4:47:7b:1f:b7:89:6e:1d:0b:90:de:2e:bc:5a:3e:e4:
62:c3:46:06:54:42:4e:b0:18:eb:32:c7:62:eb:1b:d7:8e:06:
d7:2f:8e:a0:46:9d:89:6e:25:f3:51:a6:15:9b:1b:a7:51:de:
65:18:ca:1e:6c:c7:41:66:19:fe:34:fa:d4:18:0b:35:9b:ee:
66:30:1d:b5:38:ea:f5:c2:05:33:1e:9f:72:44:12:b1:fe:69:
ef:48:ee:60:19:6e:6c:83:04:d4:e5:3d:3b:0c:35:41:36:d9:
14:38:6e:d2:8e:69:18:ee:dc:7a:ec:1b:5e:d7:46:46:69:34:
aa:aa:40:5a:cd:97:44:c0:ac:a4:5a:b8:38:d6:a8:df:80:0d:
54:12:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:18 2025 by rpki-client