Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: mFV4o103KTGgrLiM7QhnoXDkO1Y119KdWTr+hTiNv2Q=
Subject key identifier: 14:DF:F2:7F:7A:E7:34:D1:D5:9F:D1:28:32:D3:3B:48:C8:A5:EE:9D
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 0197C501756EF46492B91D32FC0803AE1108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 08:01:36 +0000
Manifest this update: Tue 01 Jul 2025 08:01:36 +0000
Manifest next update: Wed 02 Jul 2025 08:01:36 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: ig60mNxHqw4iTY42F2h2Onl0RoOUgFvizqYl29YwVlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:75:6e:f4:64:92:b9:1d:32:fc:08:03:ae:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Jul 1 08:01:36 2025 GMT
Not After : Jul 2 08:01:36 2025 GMT
Subject: CN=14dff27f7ae734d1d59fd12832d33b48c8a5ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:33:87:4b:c1:52:b2:42:98:43:2e:84:02:
a7:96:4b:4f:a7:e3:87:2b:8e:f5:fb:04:05:42:c5:
1a:4b:61:73:6a:1a:34:ac:1a:e8:25:0a:90:08:f3:
c0:6c:f7:61:cc:b7:20:fe:2d:ae:af:4c:9f:c6:f3:
0a:ba:cf:55:ec:cc:33:3b:ac:48:b1:89:45:c7:f3:
9f:00:a3:7b:a1:cb:4b:f0:4f:d5:d3:97:78:2d:2b:
87:f1:66:21:aa:1e:bb:91:fe:cc:79:c4:41:9c:3c:
3c:df:10:4b:3d:9c:1b:e9:ca:b3:5f:42:6a:2c:22:
ea:25:b2:08:c6:ee:e3:7a:9b:e6:ea:e8:08:bd:1c:
ae:91:f9:2e:94:92:50:ca:55:b2:9d:54:46:6e:a5:
cb:44:38:47:a5:24:85:1f:bb:b0:42:8b:9c:93:1f:
5f:23:47:e1:8f:cd:10:e0:98:7c:61:f2:54:55:db:
0f:a1:b3:57:c0:5a:51:22:e1:8c:9c:03:fc:40:b7:
c9:b3:04:15:a6:14:3c:37:2b:56:5a:a7:99:87:c3:
c6:4a:b6:cb:8b:d6:e9:a0:33:95:16:17:53:30:ad:
7f:ad:02:26:b9:97:33:69:e5:d9:8b:8b:74:fa:96:
99:b2:30:4c:62:c0:43:f2:98:6c:26:3e:76:40:bf:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:F2:7F:7A:E7:34:D1:D5:9F:D1:28:32:D3:3B:48:C8:A5:EE:9D
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bc:47:71:ce:4e:92:30:3d:cb:67:9e:cd:a2:3d:68:23:92:
89:f0:d9:1e:7a:1a:65:ca:cf:3c:5c:51:49:61:2c:d0:7b:2b:
63:13:4e:3e:54:5b:04:da:7e:c8:5a:59:59:dc:d1:e2:ec:58:
7b:06:36:aa:52:39:e4:f6:9b:ab:43:e9:59:4e:30:f7:25:0e:
db:3b:5d:2e:2c:0e:76:2c:0c:1f:c0:a2:3a:2a:aa:2d:86:6f:
d2:02:95:e5:77:59:0b:2d:20:e3:50:0e:13:b6:c1:38:40:c0:
d9:a3:c2:32:18:59:af:e6:89:aa:03:e6:7e:32:d3:c8:f6:8f:
88:76:33:70:48:16:1b:f7:0b:82:cf:5e:f8:47:7d:f2:c5:6d:
f5:53:13:5b:4b:9f:7c:26:03:88:05:d8:bb:00:52:7e:3e:70:
c5:ad:cb:a7:ad:43:f8:77:05:cf:5f:52:37:93:5b:f5:17:12:
6e:0d:f8:b9:5e:48:8f:eb:31:a8:0f:c3:68:ec:44:5a:84:13:
50:fc:19:0d:a4:af:c7:b5:bd:ae:62:86:22:6a:11:f1:63:86:
fa:55:11:12:da:f6:16:d1:70:3a:0e:eb:a1:7c:42:da:1f:83:
98:06:37:5f:ab:83:3f:6f:03:1b:01:cc:cd:88:00:3d:a6:89:
7b:01:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:07:17 2025 by rpki-client