Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: GajIbRoHPCMHsD6sIYredf/mwMm75p2pucKGjL3eBis=
Subject key identifier: 32:34:2A:32:4E:E6:FD:35:09:DF:76:4F:B8:F2:DC:FE:B9:0A:E3:8F
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 0198D472437590FE0FA2E89AC7933575B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: uPx+LrTm+i5HQ9GJvJ944ADHf4iZraNuJQe+bwe6SXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:43:75:90:fe:0f:a2:e8:9a:c7:93:35:75:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=32342a324ee6fd3509df764fb8f2dcfeb90ae38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:f4:a7:fd:33:ea:07:be:04:bb:f1:e0:dc:
ab:5f:09:5c:28:56:5e:54:f7:96:25:50:01:1d:d0:
2c:b7:04:39:01:fa:9b:ae:2c:27:91:29:0b:0b:47:
65:20:76:db:9b:b0:06:84:67:1a:7e:59:90:2e:54:
58:9e:a5:ec:74:20:d3:39:13:15:a1:28:ac:44:3c:
9d:83:62:5b:08:f7:a9:22:f5:d8:0b:90:ed:d9:7d:
cc:76:d2:42:9e:df:f6:ce:53:25:61:37:b3:0b:a6:
b0:f6:1a:38:7b:a3:2f:22:a1:cd:29:9c:81:03:7f:
55:1f:25:15:39:e2:08:b3:43:a6:d8:e6:53:8a:93:
b6:4d:9d:59:0c:9b:1b:ac:db:9d:e3:21:f3:34:24:
83:bc:6a:ce:72:76:56:ba:80:0d:b4:c1:61:4c:e0:
1c:23:6e:91:a2:c2:53:e9:a2:35:f1:b5:b2:e1:a1:
77:d3:fa:6f:ae:0e:69:90:59:d3:02:1b:6f:e3:46:
02:48:77:cf:d5:d7:59:36:68:4b:36:14:74:7f:2c:
3a:cd:75:13:92:8e:28:6d:94:74:58:6e:d9:8e:1f:
12:50:96:e9:b0:b8:67:5e:3d:f0:0a:0e:86:d5:46:
78:ab:46:47:53:fc:e4:ae:cd:07:f0:c5:f1:11:ea:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:2A:32:4E:E6:FD:35:09:DF:76:4F:B8:F2:DC:FE:B9:0A:E3:8F
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:f7:61:c6:1a:63:ab:e3:98:c4:09:f8:58:cb:17:e1:ba:
99:83:52:a0:2c:10:78:d8:1f:0d:b5:e7:fe:40:1f:9b:c6:29:
a8:9f:a2:36:01:55:cb:f6:85:05:d2:c7:ce:ce:ea:dc:55:33:
4c:33:86:26:93:e5:f3:9f:93:13:41:64:f2:fb:e3:62:e2:a4:
37:b8:e5:65:7e:c5:a8:65:04:fd:2a:39:47:5d:cb:be:90:f7:
cc:a5:18:ec:c4:aa:49:f3:29:d4:42:01:43:2d:d9:cc:0e:fe:
b9:f1:93:2e:de:9b:88:61:a8:8a:64:cb:3a:49:1f:7d:70:c1:
48:03:70:e9:1a:5b:f0:de:c8:8f:96:8f:bd:e9:09:ca:c0:9a:
e2:75:ee:08:0a:0b:e8:59:b4:b3:fc:03:88:33:27:d9:52:bf:
ac:15:49:7e:e4:4c:73:6a:e1:ef:d2:69:1c:b9:81:75:a2:4f:
81:d2:2a:d3:ac:7b:e9:13:7a:bd:d3:3b:4d:d6:3e:13:af:25:
2a:e2:67:dd:7f:94:0f:5d:0a:fa:30:5a:03:31:47:6c:b2:a3:
be:bf:d5:e2:4b:92:07:70:ef:3d:c7:19:81:39:88:a0:4c:ec:
ae:1a:61:d6:e0:69:67:46:a2:08:97:cd:51:fe:c9:2d:28:e2:
53:02:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:57 2025 by rpki-client