Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: qJcRY9w1CUeWraMHqZZtGaYeOBZkkOXy7+sj6LHs6go=
Subject key identifier: 6C:0D:F6:21:B7:16:E7:94:AA:C5:7B:99:33:FB:05:48:CC:69:CD:FD
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 0198D7735FC30F6B597E9C17FB7F8631286A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 028B
Signing time: Sat 23 Aug 2025 15:01:59 +0000
Manifest this update: Sat 23 Aug 2025 15:01:59 +0000
Manifest next update: Sun 24 Aug 2025 15:01:59 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: hou8lbjFcqcVEBoZ3/aVQXSxwvOqXwM/yDrN5oyRhhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5f:c3:0f:6b:59:7e:9c:17:fb:7f:86:31:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Aug 23 15:01:59 2025 GMT
Not After : Aug 24 15:01:59 2025 GMT
Subject: CN=6c0df621b716e794aac57b9933fb0548cc69cdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:2a:66:62:da:b9:2d:8d:7a:0e:24:d7:eb:
a9:6f:4b:e0:d4:85:3a:57:6c:09:33:9e:23:8b:5f:
63:b4:85:a0:71:4d:b7:15:fe:05:15:0a:7f:aa:55:
52:67:22:fc:0f:8d:2d:45:84:71:fc:0f:0d:37:76:
67:a7:23:9b:a5:51:6f:9d:38:86:9a:d7:f8:a0:b8:
cc:1d:c8:23:34:88:a8:7b:b3:46:ba:d3:2c:bd:78:
97:97:03:ae:c0:9a:59:49:65:e0:b2:63:48:84:6c:
00:31:06:d2:f9:04:15:ba:f7:5b:86:73:30:1f:e8:
20:0b:fc:9b:a4:5a:fc:4d:27:5c:bc:12:99:df:1b:
9b:81:63:13:3c:c0:2d:0d:48:98:d4:2a:4f:86:9e:
f9:0a:1d:14:62:d5:f3:51:4f:dd:e2:2f:72:61:ce:
63:7e:df:32:e4:e0:3d:6f:b6:84:45:d3:0d:e7:d8:
6c:a9:9e:cc:8e:7b:a9:cf:25:25:e6:5f:8e:09:37:
7f:0c:4c:39:c8:0f:41:58:cb:ea:73:f3:d7:b5:d1:
ab:bf:49:f9:a6:30:bd:14:27:2d:09:3b:03:86:fd:
2d:93:0f:47:2f:9b:ce:f8:bf:4a:c0:b7:8c:8b:29:
97:4f:20:11:87:f5:31:c2:8d:19:63:18:8b:62:d9:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:F6:21:B7:16:E7:94:AA:C5:7B:99:33:FB:05:48:CC:69:CD:FD
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ea:ff:ea:83:f3:65:69:7b:19:24:11:f5:31:d7:f3:78:df:
50:40:55:b5:82:16:b8:cc:e3:4b:e1:25:7a:d5:e3:83:a9:9f:
17:87:18:e6:c7:87:a8:24:05:5e:32:b4:a7:02:37:90:29:4b:
92:72:cd:9e:d5:f1:b5:1e:c8:b2:6c:6a:6b:9c:fd:3a:ff:82:
9e:8a:21:4e:e1:c3:02:ce:a0:9d:2c:73:87:ec:06:a5:c9:c0:
e2:c7:99:fb:0e:98:55:1f:24:ba:ed:7c:50:51:cf:a3:8f:70:
ad:c2:e4:0a:5d:9e:44:f6:da:c0:18:69:ed:6b:3a:94:5b:99:
7a:a7:62:87:7c:9d:2d:49:60:49:63:c1:31:7e:83:2d:eb:de:
7e:65:e1:fc:51:ca:a4:dc:be:13:8e:31:e1:9d:5d:a9:d4:cb:
de:07:00:85:4d:cc:2f:b1:ed:bc:af:b2:d1:f5:80:17:9f:40:
9f:ac:6a:16:c3:79:8a:6c:04:2d:37:38:33:c6:88:8a:df:1e:
a9:d3:8f:88:96:8b:eb:9d:b3:cd:92:b3:1a:d0:dd:d9:07:e0:
de:b4:8b:bb:93:06:5b:c8:23:d1:3f:e3:d1:c4:4e:d0:ff:a6:
0b:10:30:59:a9:72:b1:e4:fc:b5:5c:02:ff:05:cf:82:af:7e:
75:a7:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:09 2025 by rpki-client