Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: 8Xeb9r/6x9ThlgqhvllyGc4+1zbh4PMv+jNydFbH9cA=
Subject key identifier: EF:CA:F9:0C:13:35:02:45:FE:71:D4:87:86:D9:8C:B2:9F:72:3D:58
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 0198D4726B569CE050F0F57A7E61C484040E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0FA5
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: CHj+k3eM8QdbIGrmvTglwXTMo0GxqB+o5zj21VK1UJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6b:56:9c:e0:50:f0:f5:7a:7e:61:c4:84:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=efcaf90c13350245fe71d48786d98cb29f723d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:45:a0:a8:94:83:0e:12:9d:21:47:f8:18:
8c:f7:80:80:a2:93:c9:50:f5:df:66:3b:82:e8:f3:
21:d8:4c:8a:15:f1:69:f4:e6:3c:39:5a:5e:52:6b:
47:0c:36:0c:ae:80:f5:e1:8a:a5:10:76:b6:c8:44:
62:6e:ae:a7:6e:04:8f:96:8a:12:83:04:6f:b9:1e:
94:07:c1:66:d6:6c:c0:d8:76:ad:b7:6d:1f:a9:53:
ac:40:57:6a:0e:fc:ec:03:f4:0a:4a:77:2f:45:05:
82:40:e5:72:b5:f2:81:03:93:86:4c:41:fe:6c:dc:
b1:4d:03:7d:5c:df:97:72:21:a7:a6:0a:78:39:5a:
38:e8:b7:45:c4:48:d8:ef:3f:c6:2b:b2:20:09:c1:
92:86:0c:49:4d:21:0d:6c:16:70:7d:90:73:f4:cd:
31:f5:a0:fd:20:48:f7:00:4d:d6:f7:cc:7a:24:88:
33:8e:16:e3:d8:01:1a:37:01:15:dc:f5:d4:90:b0:
39:d2:59:26:bc:17:25:14:3d:8a:aa:47:8e:97:62:
d6:3e:2d:df:81:3a:9b:5b:34:7c:25:3a:af:46:ce:
c6:b1:53:34:e0:b9:2e:d1:d7:2e:40:8c:43:17:e8:
68:29:8d:f8:19:d5:df:2d:22:e3:21:93:e3:60:e2:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:F9:0C:13:35:02:45:FE:71:D4:87:86:D9:8C:B2:9F:72:3D:58
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:38:aa:22:8c:83:3a:57:31:5e:dc:c1:78:7c:20:b0:c6:
c2:04:22:03:f8:0f:3b:87:74:b9:1f:5e:9e:cc:3e:a8:24:c0:
2f:f2:74:46:d5:63:d1:b4:e9:5d:f2:6a:50:31:69:7e:77:32:
02:5e:6b:1f:7b:94:9f:60:28:8d:e8:8e:73:bf:95:08:81:6a:
d4:f8:c4:b3:7e:72:6d:94:e0:9b:f3:aa:8a:70:e3:e9:f7:d6:
fe:cf:09:b0:01:af:93:eb:79:b7:84:a4:a2:33:ce:f7:e1:b7:
7d:dd:c0:50:94:ee:53:36:64:44:f5:ce:c6:18:c8:95:42:f5:
47:8d:bb:2e:b9:49:80:c2:20:ac:ab:bb:f2:e4:f9:a8:21:b8:
fe:6c:60:0f:32:c8:2b:17:ab:85:f9:a1:5a:19:ef:58:e4:b6:
1c:66:57:20:07:60:ca:1c:5a:47:03:d6:ca:19:6d:e3:a6:32:
e7:94:3d:0e:8d:6f:9e:b7:33:22:3d:1a:9e:1b:89:e6:1c:a2:
37:7c:62:a7:b1:de:cf:65:cb:12:9d:2b:29:9b:c6:e7:aa:e2:
91:94:e4:df:5c:a7:5d:ca:00:8f:31:03:10:15:e8:86:4f:3d:
be:eb:8e:1a:03:e3:dc:14:d4:9e:a1:55:07:56:44:95:3a:99:
2f:d5:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:37 2025 by rpki-client