Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: IaoMtBYc19d6cYZkrq3rqMsuZcgrxYnPBD+45IqyilI=
Subject key identifier: 57:01:B9:21:E3:95:E9:BA:C9:BE:C7:CA:0B:59:20:46:97:B1:D9:20
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 0197B5C4D69BEA107B1724610E0B68EA0213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 01F5
Signing time: Sat 28 Jun 2025 09:01:05 +0000
Manifest this update: Sat 28 Jun 2025 09:01:05 +0000
Manifest next update: Sun 29 Jun 2025 09:01:05 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: jyYjWe7takN58vUa13rM6sNgEB/+6Z4BnxICvQtCl0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d6:9b:ea:10:7b:17:24:61:0e:0b:68:ea:02:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Jun 28 09:01:05 2025 GMT
Not After : Jun 29 09:01:05 2025 GMT
Subject: CN=5701b921e395e9bac9bec7ca0b59204697b1d920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:07:60:ca:de:bf:b1:92:71:79:8f:bf:f3:
c6:64:37:97:b1:99:1c:d5:10:c3:d8:0c:6f:5f:bb:
a0:67:cc:81:56:8e:2e:de:1a:63:d2:5f:3e:f8:72:
39:6d:28:41:de:bb:90:02:59:6e:19:d8:17:0a:20:
d6:f4:0a:43:f8:23:ac:70:51:db:ac:17:11:78:12:
75:02:6d:c3:1a:68:3b:49:72:21:da:02:6d:5c:93:
71:5b:af:bb:31:cf:ca:8e:dd:1c:97:42:88:30:cb:
e2:04:86:e8:0e:de:f1:24:09:53:15:83:cb:d6:eb:
a6:da:a6:c7:7e:60:44:ff:a3:0d:9b:48:5e:8b:61:
80:c6:99:bc:6c:ca:65:b8:63:9e:bf:8c:77:51:0b:
1b:d6:3d:53:23:cc:b0:4e:20:aa:5d:4b:26:2c:6e:
c2:d7:5a:ff:72:77:38:12:bf:9c:84:5c:ea:38:85:
4f:b1:d9:76:bb:1a:54:cb:5a:bd:60:46:90:8d:b1:
ba:18:33:8a:16:43:eb:26:7b:ae:78:c9:9e:f7:1d:
fd:82:13:9b:db:8e:a2:a9:d8:e8:64:4d:e3:df:1d:
70:a5:66:dc:c9:3b:e0:2a:44:1e:d2:86:a5:79:a3:
2b:12:8f:56:78:e3:95:be:5e:c3:02:b8:80:3e:a3:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:B9:21:E3:95:E9:BA:C9:BE:C7:CA:0B:59:20:46:97:B1:D9:20
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:a1:93:9b:f4:59:0f:50:1c:02:0c:63:53:82:1e:f9:b3:
d6:ce:a8:a4:5b:68:1f:84:1f:46:c7:ba:86:96:23:ca:6f:f1:
2d:5c:a2:5d:17:03:a8:21:4b:c4:84:dd:06:a5:d0:95:c7:d3:
54:41:77:28:aa:b4:04:ea:56:56:de:11:34:a1:e2:b5:d6:ae:
fd:71:38:b9:7b:81:16:7e:3b:93:23:bb:5c:54:45:36:20:ee:
b9:98:c4:4f:65:cc:e2:ac:9e:4a:86:ad:cb:61:21:65:df:af:
49:ba:8e:a5:98:0f:ea:15:b5:ad:0d:62:d0:18:16:cc:c5:2c:
91:8d:e5:2b:a6:51:e7:7d:37:4f:24:c5:bf:8d:05:44:05:0b:
6f:78:a1:fa:a4:b6:8c:0e:e8:91:7a:d2:15:b0:a5:22:28:6b:
74:33:47:71:32:00:c1:4b:ab:10:e9:1c:24:b5:60:97:5c:57:
69:a0:a4:45:8c:c0:2f:cf:83:9a:0c:9e:c2:39:ec:ed:39:01:
2d:6e:dc:96:04:35:71:f9:33:16:1a:fb:5f:da:48:3d:1b:41:
73:65:56:bc:e1:9c:a2:d3:a7:32:7e:af:0a:1e:64:f4:4f:f8:
8d:da:66:50:a0:b7:3d:57:ce:b9:de:68:e6:aa:a4:47:39:06:
7e:14:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:33 2025 by rpki-client