Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: yaz3QEgP/zMehJuPaMqhrUjdJmxGohkNaHlnj9lFxos=
Subject key identifier: 5A:6E:D3:23:B5:6A:E4:0D:1B:08:94:01:F5:8D:81:1F:6C:F2:C3:EC
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 0198D5F14959EAA4FCC4FFC5DD67ABC7DFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0E12
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 32ZHVTHQBiMrlyIbDJMC9oQoheqI3zQGS/ocv9XNG88=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:49:59:ea:a4:fc:c4:ff:c5:dd:67:ab:c7:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=5a6ed323b56ae40d1b089401f58d811f6cf2c3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:10:ba:6d:27:5d:17:ea:60:a1:9b:ba:31:
d7:a7:f9:7d:a0:5d:55:9f:84:b5:a9:42:6b:cd:14:
dc:f2:be:37:07:b9:f8:4d:f0:07:e7:5e:84:97:93:
ee:9f:bd:cc:fc:c4:5b:8a:1f:3e:f8:e1:9c:2e:10:
75:0e:e1:8e:06:19:db:90:30:a6:27:86:25:08:8e:
ec:24:d6:53:8f:22:f0:1f:b6:c8:27:a0:f9:ad:fd:
ef:ad:b3:9c:16:47:1e:92:9e:f3:44:05:a3:94:d6:
e1:ae:86:bc:c6:b7:ea:0b:3d:6a:5f:ec:6d:64:d5:
8c:81:fc:c9:94:a3:21:67:aa:dc:b0:d6:ba:22:49:
5f:53:db:d4:fe:f5:76:d4:9c:c8:48:01:da:b3:f6:
0c:88:b3:d4:23:b8:1a:c0:9a:21:fe:25:18:94:eb:
2c:33:84:9f:27:e4:ee:4c:94:bc:d9:65:a7:bf:cd:
11:63:ec:e2:af:23:32:d8:b3:75:29:4a:83:6a:07:
ca:ee:29:64:03:62:53:a6:fe:39:e6:e9:8c:7b:f4:
bc:50:09:49:bf:0c:e8:78:8f:90:84:6a:46:13:4f:
7a:19:7d:30:a6:ff:f2:1a:d4:a5:d9:7d:35:51:65:
13:83:29:8f:9c:70:f2:4a:ef:a8:a4:ae:14:81:12:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:D3:23:B5:6A:E4:0D:1B:08:94:01:F5:8D:81:1F:6C:F2:C3:EC
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:a7:37:41:5f:95:67:76:bb:b5:67:b9:16:2a:d8:bb:a7:
0e:91:5c:0c:fa:92:aa:e9:b9:d5:2c:9f:4f:62:16:3e:82:2c:
b0:02:e0:36:0e:ea:30:a3:69:97:7b:41:c3:7b:79:b9:d9:31:
a3:41:c6:a3:71:13:9c:14:e2:d8:ed:56:17:94:51:1d:57:a3:
14:a5:b8:f9:3b:ff:28:7f:11:d3:10:a4:5f:7e:aa:44:16:65:
88:21:b2:ec:0a:ba:f6:b6:75:75:62:6d:5c:88:6d:2f:02:c5:
20:ca:6a:f2:61:6b:06:6d:7a:ca:71:23:4c:1f:9c:92:1a:cc:
3b:e7:fb:92:83:59:3c:bf:0e:09:09:ef:fb:0b:b2:3f:a2:af:
42:60:d1:e1:4e:58:fe:53:a8:04:a8:d9:6f:54:9b:f6:08:58:
90:95:2d:0b:b2:00:59:4c:03:bc:d3:03:e8:26:a9:97:19:8d:
e5:60:bf:77:e7:c5:e1:71:c1:6e:90:2a:bf:af:33:8d:13:c8:
f0:73:1c:d4:82:c0:a9:0f:89:54:e8:17:75:99:26:27:f6:e3:
5a:19:8f:eb:40:a4:92:62:1f:29:b3:6c:e0:bc:bc:86:9e:10:
cb:1b:91:02:82:76:2f:9e:70:3d:00:b1:79:cd:53:21:af:49:
f8:5a:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:38 2025 by rpki-client