Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: zQGL5MUihS/FCgJOSLFSkFlvV2/9RJ2FElY8CN2iG7w=
Subject key identifier: C3:01:F4:1C:A5:14:03:BD:BD:CC:C7:F3:30:15:D6:F3:D3:6F:FC:52
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 0198D6CD7D01650F3740A77AADA5AD4781EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: +2NQMVtsXOtbeRtBaGy5FfZviFrpFgXzSQgv85iMJ1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7d:01:65:0f:37:40:a7:7a:ad:a5:ad:47:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=c301f41ca51403bdbdccc7f33015d6f3d36ffc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:c1:f6:1f:7a:3e:13:37:61:c5:7d:92:77:
8c:45:3e:3a:7a:7e:15:9a:3b:bc:89:71:5f:e5:7e:
b8:74:2e:72:29:90:94:af:1e:5f:04:b2:8f:ad:af:
79:70:9f:7f:e5:fe:e8:64:a3:46:8b:37:2e:a8:2e:
3a:fd:56:0e:61:ad:09:50:12:5d:24:a5:f4:4c:28:
e1:ee:f7:93:d9:3e:32:df:79:06:6e:f2:ee:b4:a8:
65:ab:40:9d:f0:ba:74:4b:26:38:5f:d3:b9:7d:f2:
46:62:1f:8c:9d:7e:00:a6:8c:e2:00:3f:39:5d:18:
5a:e4:7c:31:0a:ab:9e:1b:6b:b1:88:a5:06:fd:5b:
a7:3e:0d:3c:55:a4:6a:c2:37:1f:d1:4c:e0:08:12:
c2:c3:aa:64:27:18:19:a0:6b:de:ff:f7:9d:29:4c:
08:dc:38:5f:a8:ff:b4:9f:f1:09:b1:73:41:db:96:
cb:f6:98:0f:fe:aa:59:51:db:cf:1c:e2:a8:aa:bc:
be:96:0a:be:4d:66:15:b6:d0:44:85:c9:d7:aa:42:
83:ae:9c:3a:b2:8a:10:75:82:18:c3:ee:49:4c:91:
88:62:1d:df:8d:46:57:30:3c:e6:07:04:c6:c2:e2:
f0:40:c1:89:17:ad:42:68:cf:c5:76:2f:71:18:ee:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:F4:1C:A5:14:03:BD:BD:CC:C7:F3:30:15:D6:F3:D3:6F:FC:52
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:26:92:dd:ec:b4:54:e0:57:e4:62:6f:b9:50:13:30:45:d7:
44:99:ef:e3:12:6a:0e:16:fb:e0:ad:10:54:5c:13:bc:27:ce:
02:d9:14:ca:c1:d9:10:e5:e8:af:dc:b5:32:c6:b8:d7:49:6d:
ff:a7:b9:01:27:ca:8a:f6:4f:fe:9c:cf:de:44:9d:92:ea:26:
b3:1c:ef:53:87:d8:05:59:50:a4:85:02:dc:a9:0a:12:4f:9c:
d6:ef:23:e3:64:03:40:5d:ce:51:36:51:6a:af:91:69:a4:88:
4e:20:00:88:91:44:a6:98:5c:d1:09:24:36:7d:8b:b0:87:1c:
5b:22:ac:04:b9:ee:22:e9:3d:30:9c:9b:db:08:73:65:cc:50:
8a:ad:5f:fd:5d:64:b0:e8:39:4f:d9:fc:aa:e7:1b:95:d0:5c:
77:ad:5f:1a:63:77:f6:7a:9a:4f:8a:de:6e:b2:6f:bf:4c:1b:
a1:6a:fa:71:9c:80:25:c2:54:a6:e0:34:42:6f:5e:82:6b:c2:
94:78:33:28:7f:76:d9:5e:22:07:04:50:41:23:81:90:94:7b:
b0:af:78:03:73:5c:68:45:9e:eb:dc:d8:98:b7:c6:c8:57:26:
e2:43:f6:90:91:52:4e:02:ee:25:96:b3:cd:f3:3e:dd:bf:72:
7b:1d:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:16 2025 by rpki-client