Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: qU9g7A+oad4d05Y6treL7PRAfMYAKOB07iyvX1G3Gds=
Subject key identifier: 09:23:17:57:F2:6B:80:5A:4B:57:02:3C:86:E4:96:F1:26:0C:1D:54
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0197B70EB9010E1C6C2655382425A6203AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0C72
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: 1ejpv9zfR/CX4WMPcEfxrIlgf3ZujO/7nnc5xB0xBQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b9:01:0e:1c:6c:26:55:38:24:25:a6:20:3a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=09231757f26b805a4b57023c86e496f1260c1d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:9e:23:fc:d4:fb:64:71:01:97:ac:69:3c:
67:19:3c:c3:ce:e0:6f:bb:09:90:fd:18:6c:20:0b:
49:54:02:94:3a:5c:48:20:27:32:bd:b8:c5:50:af:
59:e9:03:4f:b3:4f:8c:1b:cb:7a:62:76:a1:2b:e6:
61:de:97:d2:7d:6a:19:b4:f1:1c:0c:0e:3c:ae:92:
bb:0c:6a:73:2e:f4:96:e4:a5:65:7f:9f:77:05:63:
73:ba:ad:15:fe:1f:15:bb:df:cb:6d:ec:ae:2b:23:
36:ef:f9:8c:58:4c:1b:62:78:4c:dd:cb:4d:68:3d:
c3:03:79:0c:31:6e:15:cd:59:51:62:5a:80:f0:e3:
2e:6c:28:41:cf:0c:6c:e7:a2:ca:85:41:f1:cf:66:
f9:8c:33:40:c0:2c:d0:aa:e6:23:27:6f:be:5f:c7:
3f:d5:8f:c5:8b:ab:93:a9:b4:bc:9b:8c:31:1a:fc:
84:63:1b:ca:1d:13:09:73:b3:77:af:78:d7:ce:a3:
45:d9:53:d6:b6:12:14:6e:8b:7d:ed:92:6f:11:cc:
64:72:54:e4:88:15:2a:98:85:3d:a0:cc:62:6e:26:
4f:e7:17:cf:75:82:90:d1:d9:a9:0b:5f:e9:41:92:
25:f8:c4:30:23:74:43:f2:bf:05:0a:a0:05:e4:91:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:17:57:F2:6B:80:5A:4B:57:02:3C:86:E4:96:F1:26:0C:1D:54
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8b:63:64:61:50:9d:b1:d2:98:08:e9:c3:20:87:d5:56:2b:
79:cb:bb:f2:de:63:84:c5:30:19:82:a4:39:8b:b3:da:4d:f3:
74:32:a1:1d:4d:0b:f9:8c:96:0c:12:e4:88:bb:a4:a1:28:b9:
cc:e8:9b:69:26:d3:12:7d:3b:61:11:98:2b:f1:16:75:73:7a:
d5:6d:93:5a:c8:0a:26:99:da:f9:c2:6d:c0:87:09:7a:8b:34:
b2:66:82:09:d5:8b:d9:2c:f9:5b:5f:10:0c:75:d1:90:ed:6b:
8c:7b:75:78:f9:44:24:31:4d:3e:37:b1:4b:ff:d8:d9:0d:42:
ab:fe:d3:29:7b:1d:c8:e8:07:97:8b:91:57:7e:9a:01:3d:0b:
44:d7:c0:ee:b3:05:77:ec:1a:3e:1e:18:c9:fc:a8:dc:35:96:
6e:b6:de:0e:04:62:44:cc:1e:49:cb:52:02:78:1b:59:02:c5:
f6:76:d5:d6:f5:47:aa:90:e6:47:04:96:f7:8c:a7:70:2a:db:
e7:04:3b:c5:51:5e:85:96:73:76:8f:2f:60:d8:de:6e:ef:0a:
7c:06:be:ec:65:30:57:8c:ab:2e:8d:ab:da:e1:9d:9c:25:b9:
c6:d7:51:29:2f:ec:cf:b5:98:e6:f2:a5:ec:40:21:06:c5:ff:
f8:e7:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:51 2025 by rpki-client