Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: Y1+Q8eGb8q3BNcfQissLbPiJu2vqKFRXU83RtZqZYkc=
Subject key identifier: 07:E0:06:5E:08:D8:FC:E9:CC:BF:21:11:F2:B9:8E:F7:8A:07:C2:06
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 0197C50148041183A7B59EA7F06531C35076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: 39
Signing time: Tue 01 Jul 2025 08:01:24 +0000
Manifest this update: Tue 01 Jul 2025 08:01:24 +0000
Manifest next update: Wed 02 Jul 2025 08:01:24 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: RZBu5ebYun3Nj2tWkF88f32pV2u/D8RKWH5734IWVwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:48:04:11:83:a7:b5:9e:a7:f0:65:31:c3:50:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Jul 1 08:01:24 2025 GMT
Not After : Jul 2 08:01:24 2025 GMT
Subject: CN=07e0065e08d8fce9ccbf2111f2b98ef78a07c206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:8f:f6:51:50:ac:27:92:ce:1a:38:e0:6f:
c5:49:16:e8:6e:84:7f:db:15:48:a9:3b:45:3f:2f:
f8:bc:b6:68:ed:eb:41:99:fc:a0:71:d1:cc:f7:24:
66:c5:e2:4c:21:9c:4e:15:58:dd:00:9c:c7:0d:6d:
30:6c:c7:a9:f7:5f:b9:29:21:48:9f:70:49:67:09:
77:12:d5:6d:4a:80:15:53:ef:6c:63:a1:51:bb:11:
c5:e8:80:51:6d:c7:30:cb:a7:49:e8:23:53:6a:01:
9c:0f:a9:89:79:f6:83:02:5f:7d:b9:00:9e:a2:14:
df:88:3e:9a:c3:d3:7f:66:12:05:64:41:cd:19:d6:
28:37:7b:5e:5b:be:42:a2:67:92:2c:b4:7d:0c:ca:
a6:f5:80:17:75:ee:54:b9:2b:10:5e:7c:71:a9:6c:
49:f7:30:c9:83:36:fb:20:87:41:13:28:2e:a5:9b:
ba:dc:12:15:bb:95:d3:3e:82:5c:c6:b3:e2:99:fb:
15:72:89:3e:a8:da:93:25:15:07:b1:03:11:fa:33:
d8:79:17:20:f1:a7:c3:bb:77:c3:22:6e:31:b1:f6:
ad:da:41:80:1c:50:f3:cb:4e:ab:53:a3:ac:7e:cb:
ec:f4:ec:e8:da:04:a3:44:34:1f:af:66:30:b2:cd:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:06:5E:08:D8:FC:E9:CC:BF:21:11:F2:B9:8E:F7:8A:07:C2:06
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:5e:04:25:05:16:a4:80:ca:b4:c9:34:3b:62:99:4d:25:
58:03:6e:ad:5f:b3:fc:94:c2:be:f1:5c:ef:b8:29:86:a6:79:
29:82:3f:80:4d:21:40:72:72:d0:64:89:95:b6:b3:ae:e5:01:
a0:50:62:d3:75:ac:23:08:ca:ed:f6:76:85:e6:9d:46:19:e3:
18:3c:4e:be:f6:f3:07:65:41:a8:6a:ed:c0:f0:2f:8a:32:bd:
4e:6a:c2:52:a6:54:d2:2c:60:b9:9c:2f:be:81:2d:c0:af:f1:
82:fa:68:dd:1c:b7:92:8b:9c:56:08:cc:bd:15:5e:e6:76:11:
b4:f1:fc:d9:d0:a7:a9:c7:55:2c:6c:07:19:ed:50:b0:18:3e:
f9:28:04:bd:d3:38:40:28:ea:1d:c3:2d:e5:f7:dc:da:12:27:
5e:78:cd:da:67:65:ea:75:0d:26:00:ee:ef:28:06:af:7e:d6:
1d:f7:e4:38:d2:cc:a3:27:5f:61:05:fe:64:02:15:d2:5b:18:
6a:d3:8a:9c:1f:fb:a6:74:50:8e:55:20:be:a6:47:d3:3f:e2:
7d:76:4f:f3:19:7a:5a:61:7e:f9:fe:98:84:7d:fd:f8:28:81:
67:72:7e:6b:4a:e7:15:df:50:73:17:47:e0:81:ce:4c:83:6d:
88:aa:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:21:10 2025 by rpki-client