Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: /iywVi7MhotoHLAlQLcQI6WMaFIRtCL1ir8CMTxsGsM=
Subject key identifier: D1:DE:75:E5:A6:93:F8:74:80:69:37:BE:CD:BB:2F:05:FB:36:78:D3
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 0197B7EACEF9A254175BBE20DEB426BD09BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 075D
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: qfpDkL2YmVOsZdWrHK+nP2WadGQmR8OX52fHOukxpHo=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ce:f9:a2:54:17:5b:be:20:de:b4:26:bd:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=d1de75e5a693f874806937becdbb2f05fb3678d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bc:50:4c:5e:81:77:98:6b:c9:a3:2e:ff:92:
e8:90:15:a1:b6:79:eb:d4:a1:35:95:ff:be:45:b0:
19:06:bf:2d:05:69:b5:01:5d:80:f4:23:67:68:59:
c5:4a:b4:55:7f:a3:99:7b:a6:4d:8e:e0:bb:5c:25:
77:d8:bd:7f:56:30:da:cb:2d:f7:c4:36:28:ef:23:
52:7b:ee:f2:09:7f:e9:45:a9:60:fb:2b:9d:d0:bf:
b6:a3:07:09:27:41:c3:88:85:6f:6a:4f:71:77:67:
2c:63:08:d6:06:63:ab:fd:3c:47:90:77:cb:f5:0c:
9c:2d:8f:dd:77:df:7a:7e:97:f6:72:f3:0b:08:13:
87:7f:7c:a2:42:c6:f5:b6:c2:5f:59:4c:a4:19:67:
fc:97:cf:76:20:a7:e5:a2:f1:d8:56:c1:41:7c:92:
19:b6:0b:3b:aa:d2:ff:8b:f4:9c:f2:b5:4d:cc:d3:
71:e3:2b:fb:e0:a0:36:07:ee:1e:2a:be:c9:eb:78:
b1:90:e7:1b:82:11:5c:b4:6f:82:36:1c:d6:d0:f9:
33:ca:0b:13:30:df:18:6d:3c:ac:1a:6d:50:78:17:
d2:b2:80:bb:84:26:cf:4e:cc:c9:e5:21:e0:64:8c:
5c:15:4b:9b:5d:87:43:4a:7e:70:1c:a1:3f:fe:86:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:75:E5:A6:93:F8:74:80:69:37:BE:CD:BB:2F:05:FB:36:78:D3
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7e:18:2c:02:ae:0e:b2:61:17:39:ce:01:35:e8:6e:84:85:
23:d4:a6:de:73:02:d9:66:cd:ee:b6:39:e0:8b:7c:10:33:62:
8e:35:27:37:a8:58:a8:d3:54:b0:12:b9:ee:0e:e0:aa:7c:7a:
66:43:5d:08:47:fa:c9:43:66:74:59:4b:af:9a:5d:f1:df:f1:
df:09:69:86:e3:4e:c9:11:10:0c:b1:83:bc:7d:de:3a:38:fb:
2b:0c:39:ee:4d:46:ea:69:69:c4:ce:65:4a:76:e1:21:0f:e7:
a5:e4:af:0c:bf:83:48:8e:7e:04:c1:3a:c5:d1:66:60:c9:7c:
40:3c:99:62:9b:49:f3:df:05:c2:05:1d:79:bd:d7:08:81:c5:
84:4a:a0:c5:89:88:c0:ac:03:90:a1:00:84:75:be:a4:40:f2:
49:ff:b1:66:ab:27:52:a9:fe:aa:62:16:1e:f5:39:6b:8b:2f:
b6:3e:6a:89:46:2f:15:cd:33:03:37:59:5e:39:65:6a:88:30:
31:39:6c:ac:5d:39:92:9a:27:e2:fd:1d:da:ef:8c:84:9b:44:
19:02:c0:08:1b:4e:0e:89:91:07:f2:9c:7f:56:16:3b:21:4c:
f9:f4:ac:b0:aa:8e:e7:16:79:41:6d:2b:9f:21:82:a0:1a:9d:
73:65:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:26 2025 by rpki-client