
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: 1p8EGN9STItzdyC6ZRtsINib8Dzpg9Elpjys2cr+xn4=
Subject key identifier: 76:A6:5D:30:26:B4:AD:F2:E0:1C:59:77:1C:8A:0A:36:A4:1D:E7:A7
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 0198D5BB85AAD90A138099DC041784ACC06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 07F1
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: tl2gcjyIDoKN2WQAqOg5dKSogjftHqu4nV/Bd/mk4/o=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:85:aa:d9:0a:13:80:99:dc:04:17:84:ac:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=76a65d3026b4adf2e01c59771c8a0a36a41de7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:dc:9f:ab:09:12:0e:54:58:1b:31:e7:be:
ff:46:e8:92:e2:ab:5e:28:6f:05:e0:11:5e:c1:d7:
6f:e2:aa:8a:5e:56:34:d4:d0:0f:c2:58:3d:45:08:
b3:01:80:8b:a1:38:9d:f4:65:b6:53:71:66:68:f6:
6e:18:cd:c1:9a:44:d8:0f:56:23:75:63:56:10:3d:
1b:b6:64:ad:02:41:ac:91:a7:1b:4c:b2:a5:e8:29:
c8:32:33:f3:13:18:77:08:c0:db:e7:12:f1:e4:5f:
13:e0:02:31:13:9e:4c:46:00:8c:e4:01:db:81:f2:
b4:ef:5c:86:c8:b8:28:ba:76:86:91:ce:30:24:3c:
f3:e7:6d:dc:09:cd:3a:97:fc:51:c6:84:99:3f:2b:
ce:ec:c1:5d:ff:63:b2:76:a7:d9:db:db:ac:1e:14:
a6:2f:2e:08:67:0a:37:3b:b1:cd:54:b3:2e:b3:ee:
83:51:68:35:c4:46:97:8b:c4:d1:04:9e:82:c2:3d:
83:04:02:8f:2d:b6:e3:95:19:3c:f6:65:8d:29:97:
da:a3:63:04:fb:a5:11:b7:0f:3e:bb:86:98:4a:05:
a5:c3:2b:4a:22:1c:13:8a:ad:56:9a:bf:45:28:80:
37:d3:dd:b8:df:b3:db:96:39:3f:25:b5:b9:2b:74:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:5D:30:26:B4:AD:F2:E0:1C:59:77:1C:8A:0A:36:A4:1D:E7:A7
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:49:5d:b2:a0:46:79:dd:38:00:65:c2:ed:28:40:5a:55:31:
0e:8e:ea:f6:94:b3:ac:8d:b1:d7:a6:39:31:df:c5:2a:8d:24:
0f:f7:3e:44:ef:89:1d:a4:a0:95:69:a9:8c:1b:46:8f:5d:d6:
5f:52:36:9f:bd:43:a1:23:67:e1:76:e5:9c:cf:85:28:03:8e:
13:95:fd:af:78:02:f7:03:64:5b:95:3b:38:96:5d:39:4f:4a:
d7:dc:52:27:bf:87:55:81:ef:44:06:21:94:12:28:66:1b:8d:
0a:d7:b4:13:ba:4c:70:84:60:1b:fe:58:91:74:6d:69:28:a5:
3d:07:20:7e:0e:4d:44:93:75:61:c8:0d:a6:72:a8:8b:03:3f:
d0:bf:94:47:b9:65:b2:56:71:84:b5:10:41:e6:da:c7:d0:59:
cb:0a:04:7a:c3:cf:d5:ee:3d:13:48:ab:9f:30:51:6e:19:f5:
40:fe:6d:6b:31:25:3e:10:3f:ab:0c:71:b7:ba:68:c4:ae:08:
e5:4d:64:3f:5a:b2:d3:92:f6:3b:a4:53:51:eb:f9:01:27:af:
3d:78:f5:8b:86:80:d7:a7:f3:cb:4d:a6:1d:66:77:47:03:d9:
21:af:6b:d3:00:a8:a2:10:52:97:09:80:1c:fe:11:89:34:7e:
4d:1d:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:02 2025 by rpki-client