Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: V3F2MsFuqiPvtk7Yi4GyS6xHyVTlBXJwIMHqLA2jjdQ=
Subject key identifier: D7:30:EF:40:45:F4:8F:D1:10:B3:E9:CA:86:C1:06:87:28:56:56:5E
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 0198D5BC0DC26BD668B7C99078EA019A1505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0A49
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: OdONPPBKvJ9W56kvfD8xwigjYFE+5dg/JKmqnANS6tw=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0d:c2:6b:d6:68:b7:c9:90:78:ea:01:9a:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=d730ef4045f48fd110b3e9ca86c106872856565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:92:ea:8a:ba:73:34:26:f8:94:a4:38:95:
f3:d2:16:0d:f0:69:d8:cc:e3:dc:59:21:ab:ec:de:
ee:a5:04:90:3d:32:9e:4b:d0:93:e5:71:77:8e:aa:
7d:1c:dc:3e:4a:8f:e4:90:c1:a7:70:1f:8d:d9:2e:
ca:87:0d:13:8c:e7:f6:1f:74:cb:97:e9:cc:52:82:
a9:22:e3:59:1a:84:14:11:b4:b5:5b:5f:c8:03:01:
ca:0f:7a:ba:59:b4:dd:03:1e:30:7d:ab:ce:33:78:
31:5e:72:26:49:16:4b:91:2f:8e:fe:81:a6:49:95:
74:33:2d:7d:bb:26:a2:ea:8d:12:00:7a:7a:fb:d8:
9a:c2:b9:f5:c3:b4:8a:ef:27:20:88:89:41:b5:06:
22:5b:ac:5d:42:79:96:bf:b3:63:97:8f:b1:cf:f1:
05:27:f7:db:ee:f4:c7:05:20:83:67:63:5e:2a:34:
b7:4c:6c:37:1d:85:95:92:7d:81:25:f5:b0:d9:84:
5d:96:ac:59:c1:ed:a0:f6:45:5b:31:e0:f1:a1:5e:
7c:56:aa:9e:68:93:fd:55:e5:e1:4b:5a:8d:41:6e:
41:14:cd:39:83:14:05:50:05:3d:b3:48:5b:4a:af:
d2:87:96:4e:c1:26:e9:7e:9b:0e:00:89:1b:7a:d9:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:EF:40:45:F4:8F:D1:10:B3:E9:CA:86:C1:06:87:28:56:56:5E
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:ac:75:3c:3c:a3:5c:56:9d:1f:f8:96:f3:de:0a:27:65:
69:6d:33:da:73:50:62:d8:7a:7d:27:80:01:a9:ff:74:f3:f8:
3e:4c:ab:7e:cb:18:d2:1d:8c:0a:0c:3e:67:83:62:f5:fd:39:
62:f6:b1:1e:72:1c:01:d4:7f:07:aa:e8:c7:df:1a:c7:29:65:
fd:bd:21:5b:bf:67:0b:88:d2:4d:a8:6b:98:f2:cf:13:65:95:
ec:62:46:5a:b9:12:fe:77:13:55:10:2e:27:e7:82:5e:73:eb:
af:a0:f8:8f:51:56:e6:13:47:7b:9d:57:61:db:c5:ea:54:df:
4d:d3:68:ef:e5:80:5a:1f:64:af:f2:c1:7d:1c:cd:df:a2:5a:
d5:d6:16:d6:4f:0c:7d:1a:f1:78:99:73:c8:bc:11:f6:ec:1c:
69:46:60:db:e9:2c:bf:29:2d:ed:c8:ab:97:1d:65:51:9a:6d:
8e:c3:1c:ff:94:39:a3:e6:e7:4a:58:7c:73:0c:f9:43:39:66:
a7:65:0d:ac:4e:6c:90:7d:ad:b5:70:59:74:05:4b:85:1d:94:
50:e1:c2:0f:a8:7f:72:24:0b:33:67:08:60:cc:c6:fe:a8:1d:
c5:23:5e:c1:75:0a:a3:55:c9:0e:5b:28:2e:f0:3d:29:18:bf:
bd:6b:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:51 2025 by rpki-client