Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: u8M0SBOwQg+Q6Usaz7poClizbXlzc+w+4/Z3Iu4oi1M=
Subject key identifier: 8E:1E:B8:B9:11:B5:AD:6D:A9:9F:8E:AE:9B:EB:DE:5B:A7:06:6F:22
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 0198D4A82D5A113256D9D90E8F5521B69F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 0315
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: j2N9ppkY31dTr8AjuRNxvacNLzDd2zDKHS7bChtvjqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2d:5a:11:32:56:d9:d9:0e:8f:55:21:b6:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=8e1eb8b911b5ad6da99f8eae9bebde5ba7066f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:a8:ac:90:d6:b2:14:31:6a:c3:a1:41:a4:
60:f3:75:ef:f1:59:3e:03:3b:7a:5a:18:85:78:07:
5d:b0:6f:8d:50:00:74:8b:e3:12:7e:d5:66:ec:bc:
2c:bd:3b:29:96:03:92:0d:6c:30:e5:74:60:83:fd:
7d:96:35:5b:eb:51:02:cf:52:b3:fd:7a:d2:73:6a:
0b:5d:95:c8:77:07:ba:7a:aa:1e:a8:ed:8b:91:e6:
91:81:4d:c2:9f:f9:85:09:38:34:c4:fe:3c:ae:17:
9c:d4:3f:c8:42:e0:a9:57:1f:bd:ae:37:79:69:72:
94:dc:2e:8d:b0:e6:a9:4f:59:1d:bb:e9:6b:2b:f1:
41:41:b5:50:b7:1b:23:a2:5a:e0:8d:ee:d2:0f:92:
9b:87:f3:fa:96:44:94:c3:5e:6c:e5:e0:da:5f:91:
ed:d4:c2:a7:66:e9:62:e5:8f:ad:50:0f:81:b7:69:
91:82:52:79:9b:40:39:c8:aa:07:2a:9a:cf:b7:52:
36:dc:3b:fe:c8:44:de:99:68:ef:4c:77:60:a1:16:
3f:a9:be:33:da:2a:02:eb:da:43:36:f0:dd:39:86:
38:07:df:95:0e:ca:bb:61:9f:20:69:2f:e5:52:2b:
b8:53:05:c3:8a:e2:86:03:41:41:56:64:6f:49:19:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:B8:B9:11:B5:AD:6D:A9:9F:8E:AE:9B:EB:DE:5B:A7:06:6F:22
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:1e:a7:bf:f7:6c:8b:9a:b1:f5:ec:0b:6c:e9:90:5f:47:
27:af:6d:89:bc:66:59:b2:84:8a:66:2e:c1:de:09:a9:56:8c:
2f:bf:fd:cb:9f:29:c1:a0:16:ed:92:23:b6:2e:2a:ea:59:16:
32:87:5c:5f:03:ce:ea:c2:21:d8:b1:92:d4:6d:26:06:e4:56:
ab:d5:47:69:fc:93:c9:1b:bf:ba:d3:e4:3e:69:e4:a2:c1:50:
2e:24:fa:15:2d:cb:b3:34:ae:e8:d0:98:36:1a:48:8c:1d:64:
9e:fb:45:69:b3:0a:05:d8:f0:58:86:b7:80:c5:ed:58:6e:9b:
2e:fb:16:df:ac:56:d4:4c:fa:b0:9d:1b:4f:09:f7:f1:4c:27:
14:a9:30:b6:52:9c:45:f6:e0:dc:49:09:df:0b:84:2f:8c:47:
a0:31:df:3b:9f:ac:b3:39:11:2e:99:44:fa:05:32:52:f3:c4:
32:d4:80:fa:3e:a7:9b:9e:9d:45:17:2f:e4:ba:f5:e7:fc:5c:
ed:23:4e:b7:85:73:6b:16:ca:c5:e9:54:ff:1c:6b:bb:ec:c1:
50:02:30:6b:de:86:6b:3d:97:00:7d:5b:6d:90:9a:6b:0a:16:
7f:21:f5:24:ad:f6:54:68:f7:6f:39:83:bf:c2:74:95:e8:7a:
db:10:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:53 2025 by rpki-client