Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: fuXHTkzpOtJMbo1efD1vyYDg9HzPAk6myK0QTaEa4qM=
Subject key identifier: 64:99:54:A0:8B:09:8C:A0:13:0B:FC:DB:40:97:E9:82:6C:03:CE:8C
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0197B7EA66B8E2F51F43A9A48DDCDCB13238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 0656
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: TWi/qJtmu+g/6VrSpUNJZwcJK6QVnieIuc3Lobuda1Q=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:66:b8:e2:f5:1f:43:a9:a4:8d:dc:dc:b1:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=649954a08b098ca0130bfcdb4097e9826c03ce8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:36:4a:f6:b5:07:6a:bd:dd:db:92:52:8e:
97:1b:7b:83:d3:55:86:3f:3a:fc:a4:7c:3e:96:6c:
cb:b2:d8:50:03:f3:c8:9b:a2:fb:3c:e6:b7:2c:0c:
1c:50:24:03:f5:eb:6f:ec:f8:9c:a4:83:4a:8a:8f:
36:80:b8:10:f5:57:42:29:f4:ae:93:1b:65:eb:59:
85:a2:84:f6:9f:29:29:71:df:6b:4b:69:4b:ca:51:
d2:6e:f2:62:5d:c5:e6:8b:ad:e3:08:de:94:f3:59:
35:0b:e8:c3:2a:49:2e:ae:5d:09:af:ca:e3:f0:ee:
53:17:af:af:03:06:23:74:8c:c7:a1:6b:66:0d:fa:
65:ba:aa:88:16:5e:05:e3:19:35:0c:04:77:dd:12:
9a:0b:32:dc:0f:98:9e:0e:37:a3:6e:57:8f:0b:fa:
b9:ad:80:52:75:17:e2:2b:03:2b:e3:7e:7d:fc:2c:
ba:a8:27:4b:6b:53:e8:31:36:4e:ea:4a:fa:e0:c9:
45:30:1b:6c:b4:40:6c:3d:4a:8f:68:93:a4:d7:1f:
53:bc:8a:cc:8a:0c:2d:65:bd:87:76:4b:df:6c:62:
3c:ea:91:d6:dd:03:3d:7b:a7:6a:9c:49:dd:05:d9:
3c:c0:39:78:ea:15:33:4d:81:be:cb:29:3f:2f:4e:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:54:A0:8B:09:8C:A0:13:0B:FC:DB:40:97:E9:82:6C:03:CE:8C
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:54:dc:34:e2:5e:b9:17:15:68:66:77:46:d9:0a:42:b5:
81:35:c1:6b:70:94:ec:c5:5e:3d:7c:28:7f:4f:3e:06:92:22:
e0:db:cd:60:29:8b:28:6b:7b:bd:70:44:bb:47:44:6c:c1:8b:
47:2f:85:0a:ab:3c:6d:9c:5c:f2:cc:91:f9:d1:57:2f:3e:fe:
9f:c0:51:84:e2:f9:de:73:90:dc:30:86:b0:30:3a:36:61:b9:
ca:b0:7b:45:9d:58:95:19:18:af:e4:0d:d3:03:b1:d8:dd:96:
3b:97:18:84:99:10:69:fa:98:91:28:04:e6:f4:09:a3:78:a9:
13:ae:a7:2d:1e:08:29:0c:a8:d8:cc:8f:0d:70:0b:bf:b6:d8:
6a:9c:07:a6:a0:bb:c0:40:24:9c:27:4b:ac:9c:c2:5a:7c:71:
bc:60:0c:44:e3:c0:30:02:d7:b8:02:6b:dc:a8:8d:68:8b:db:
4f:29:9e:d8:5a:2f:79:36:09:2e:b5:46:bc:59:8b:2a:af:25:
44:4b:53:55:34:1e:90:51:f6:19:e4:ac:a7:c5:87:2b:c0:60:
d9:7f:78:2f:d3:2c:b3:97:e4:9d:fc:ac:4c:a7:04:25:d1:76:
56:06:fd:ac:4a:d2:88:d5:cc:10:a8:de:e2:e4:5f:75:89:00:
ed:c7:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:49 2025 by rpki-client