Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: LeLgeyVcdKtIezUzjItvKDvsVQr5ROCMcn2n4vNv5UI=
Subject key identifier: 28:FE:FF:42:AB:46:E0:44:95:34:98:6C:35:04:9D:F7:8F:2C:4E:78
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 0198D54E4F6D66F6DB9D6A4CED8CC77805C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: C6
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: jaHbnXMbp0vCRmL550nh4d1A4N1JeAA8AhFyFuKOous=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4f:6d:66:f6:db:9d:6a:4c:ed:8c:c7:78:05:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=28feff42ab46e0449534986c35049df78f2c4e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:49:fb:85:2c:3b:87:7e:42:a1:75:f1:94:
d2:75:6f:51:fe:e3:82:54:d3:4d:30:bd:cf:29:02:
c9:c8:94:88:19:c3:5d:64:b1:ab:a9:2d:e6:d8:85:
98:2b:07:a8:78:f5:61:ad:dd:7c:f5:c8:93:89:88:
10:1e:a4:86:1e:89:37:d9:69:21:53:1f:53:d9:4b:
a3:75:3a:1b:bc:e3:70:5c:f8:0d:7c:7d:8f:57:6c:
c2:a1:68:e4:da:d7:d8:63:89:6f:86:68:34:79:b4:
eb:a1:15:5b:9f:87:0c:0e:01:be:92:59:bc:9e:8d:
c9:9e:2c:dc:83:db:2a:17:3c:da:c5:c8:1d:55:fe:
32:33:9e:a5:05:4b:24:7c:9f:7b:a1:39:ce:81:9f:
f0:4d:5d:d8:74:1e:54:0a:ea:61:a3:62:cf:51:0c:
52:44:73:de:de:f0:e0:fa:30:8b:26:bd:13:5d:82:
c9:89:d9:08:be:38:68:b0:9b:57:ab:2a:0d:49:06:
38:2e:a7:c5:c9:a4:f8:70:2d:85:88:e7:d8:1f:90:
7e:2d:00:09:28:b8:5f:56:75:e3:99:4c:e6:36:b5:
52:17:3a:21:55:46:0a:ea:f5:42:b9:01:da:99:46:
a9:33:82:86:39:02:64:dc:e0:33:f8:40:2e:05:3d:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:FF:42:AB:46:E0:44:95:34:98:6C:35:04:9D:F7:8F:2C:4E:78
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:0c:be:9f:e1:6f:97:8f:b4:0e:04:71:0b:3d:bc:1d:31:
cc:02:6e:34:90:17:7c:f3:9c:98:c0:3d:72:29:62:5b:b6:28:
6c:75:4d:fa:fd:5c:c8:c2:a5:6b:42:50:96:e0:3b:20:bf:5d:
79:ba:cc:f7:5c:9b:3d:00:73:fd:7c:95:4d:cd:3b:54:10:67:
10:0f:db:cd:93:84:5e:90:49:d0:5e:b8:a8:4d:03:9e:06:83:
b9:e7:68:7a:9b:0a:32:50:e5:82:5a:bc:47:42:4f:54:3d:b2:
cb:9a:b3:4b:0b:89:05:49:d1:10:b5:15:fb:3f:93:82:3a:5b:
52:73:cc:00:42:3b:94:77:f4:56:d7:b3:aa:a2:61:08:63:12:
80:ba:4c:c1:32:18:9a:39:44:ad:8c:84:37:17:15:98:9b:36:
4c:59:4d:8c:36:28:29:ac:9c:25:b0:31:81:6e:30:c6:d0:31:
f0:d7:db:16:bc:f5:92:77:de:47:4f:d3:10:50:b9:33:99:4b:
94:05:d8:1b:40:47:84:ad:dd:ba:8c:da:b8:6c:0d:e1:07:bb:
aa:0a:68:c5:3a:a7:5d:ad:34:97:3b:35:69:4c:d3:fa:62:7f:
fc:76:b1:a8:6a:e3:b9:39:77:b1:d3:52:f8:ac:95:9a:95:77:
2d:de:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:46 2025 by rpki-client