Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: N/frhdibjHOPtVSlLQwOOqM7a05Ej/6bnRXGLnOYam4=
Subject key identifier: 9C:E9:D8:19:A5:E9:EA:F3:AF:8D:E5:27:FE:DA:71:87:58:95:78:01
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0198D5BC1653D17405263218F08AD840474A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 06EA
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: IZUgQzgqMuzXVUMxbYRyY3BOrhnfPQyeaCFXW0LuzxE=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:16:53:d1:74:05:26:32:18:f0:8a:d8:40:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=9ce9d819a5e9eaf3af8de527feda718758957801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:9e:ef:48:32:6e:6b:02:e7:08:84:3c:be:
64:09:10:08:18:82:d8:61:98:cf:7f:32:c2:17:51:
3a:ac:7c:3c:b8:c4:93:f0:3c:48:df:87:cb:a5:11:
35:04:80:58:80:96:71:ff:2e:1f:3a:51:19:60:3e:
3c:ff:5b:fd:68:5a:8e:ee:83:41:98:68:03:c1:3c:
bb:91:58:e9:a6:3a:30:a1:e4:30:2b:2f:a2:4a:13:
37:c4:ab:d7:6a:74:75:7f:f1:35:25:9e:98:cf:76:
bb:00:6b:c8:62:d9:ac:42:83:54:ef:1e:c3:18:67:
53:2e:69:16:51:0b:e0:e3:81:0d:5f:87:cd:75:b2:
6e:34:59:17:37:e9:ae:5b:43:82:97:5b:9f:d2:43:
db:be:3d:f8:89:11:04:1c:8a:a7:ab:90:f8:a8:14:
71:94:5f:86:9d:00:5f:79:a3:c1:7d:74:7f:9d:89:
c4:fc:1c:f4:48:c0:89:63:d8:82:a7:27:ef:9d:c1:
1a:37:19:c7:80:c4:0e:72:ce:19:58:0c:93:27:c6:
f5:85:2b:1b:cf:e2:84:50:f2:17:f4:26:6c:82:d3:
ac:44:b0:18:c6:98:26:0a:05:9f:ad:b9:9a:c1:27:
a6:85:91:78:d6:1c:5d:a6:5b:63:5c:7b:e0:27:35:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:D8:19:A5:E9:EA:F3:AF:8D:E5:27:FE:DA:71:87:58:95:78:01
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:53:d7:e5:ec:5f:93:d4:2a:2b:a7:9e:90:69:c6:ae:88:45:
5c:ab:98:aa:7b:55:15:f3:c9:33:91:f3:e1:c4:f0:c9:09:8f:
c9:f5:31:a9:85:5a:32:81:16:be:ac:b8:50:6f:25:29:e6:eb:
07:71:0e:e3:7d:b0:8e:14:41:8b:2e:53:1c:5c:cf:bc:4e:4c:
7a:c0:2a:78:be:d3:16:10:4f:ed:0d:e4:53:6c:7e:71:32:70:
6c:c9:55:97:5e:ef:ae:22:48:82:ee:c1:db:51:89:6a:2c:83:
14:41:a8:c3:9a:f4:68:b2:e6:25:09:cf:4c:d4:0d:bd:89:c9:
3f:37:20:4b:4d:09:de:0f:6d:75:11:86:cc:bb:1d:f9:73:41:
1b:f0:4e:a4:d7:4b:0d:80:6f:63:e2:34:e3:1c:2b:15:6d:39:
c5:96:38:f6:0c:5c:01:47:0b:b0:a9:7c:f0:ae:da:9b:af:b7:
73:5c:94:29:14:52:e8:05:71:86:36:3b:b6:b1:fc:a0:65:bd:
d0:74:44:32:9f:c1:02:1b:0e:c1:11:04:7c:ce:61:89:2e:98:
63:35:2c:b8:0a:d5:68:62:b2:20:6f:36:46:13:6c:85:80:a3:
56:bb:12:cc:b7:59:0e:55:2a:da:c9:df:63:fb:e3:56:98:fc:
37:22:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:04 2025 by rpki-client