Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: 3i0hJfRH25bDAWzNYUZsz/wFEdydZCDWyyjXf6N8cm4=
Subject key identifier: B4:C5:7A:99:0F:81:D5:3C:95:B2:1C:68:0C:3A:48:90:4F:A9:37:D7
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 0198D54E027D64806AD6FD6A1F2F39AF2CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: nd8u2EBLuNcAsXEVJ5N0o5ksT6tkDFTcJqLYtiAMfcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:02:7d:64:80:6a:d6:fd:6a:1f:2f:39:af:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=b4c57a990f81d53c95b21c680c3a48904fa937d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:c6:45:05:f7:59:90:20:34:83:2b:5e:f3:
b2:d0:97:ee:34:81:23:79:a7:53:fc:b3:c3:0b:01:
a5:ba:37:36:a8:68:0e:fb:91:ab:7f:69:b1:73:c4:
50:b8:8e:9a:fd:31:0e:03:82:a4:59:80:27:93:26:
47:73:b3:92:cf:19:ce:0d:21:6f:be:51:05:db:f8:
20:f8:b9:cd:d2:83:e4:06:7f:c7:0e:01:1e:03:8a:
d6:ca:48:80:70:1b:22:e5:20:c2:37:ff:a0:d7:a2:
78:0d:0e:d2:73:69:9f:3b:1d:db:d3:37:24:73:0d:
28:7b:3e:7e:06:9d:b7:7d:73:8f:73:8e:36:5d:f9:
b2:b4:e6:17:25:f2:a8:20:77:96:89:5f:80:00:2e:
a0:4c:eb:ef:6d:e4:11:91:fc:37:81:ff:30:50:8a:
4e:20:43:59:af:f0:b0:ff:5e:74:15:da:21:a0:5e:
f8:41:e5:00:f9:7b:e8:8f:5b:45:46:c2:bf:d0:bf:
1f:c7:86:3a:d6:a9:a4:d9:ce:07:ca:3a:f4:eb:2f:
16:c4:17:69:80:8f:11:72:c2:c2:50:0c:59:c1:c6:
53:d4:8d:dc:83:9f:d6:af:71:7c:d8:ea:9d:7e:28:
95:b2:68:01:e8:cd:42:85:f4:5f:52:f8:33:fc:8d:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:7A:99:0F:81:D5:3C:95:B2:1C:68:0C:3A:48:90:4F:A9:37:D7
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fb:7f:59:1d:50:36:c1:d6:79:3b:65:f9:f6:db:3b:ac:ff:
d3:98:2b:ed:3f:cc:b8:17:f8:a4:54:77:a7:7a:12:cb:a7:93:
b7:66:61:bc:66:fc:48:2d:54:b8:67:0a:aa:78:52:c6:87:80:
30:f2:6b:0f:3d:fe:ab:30:70:3c:49:5f:cb:3b:63:a7:9b:94:
7e:b9:51:9e:44:71:a6:12:51:9c:1b:30:6b:ac:dc:63:d1:2f:
9c:d6:53:49:9a:7e:9f:7b:4e:1d:e6:6e:a9:2e:bc:81:b0:62:
e8:a2:b1:37:7d:3f:61:10:5d:bf:76:de:9a:bf:9b:48:c8:75:
aa:50:15:07:ef:95:7f:35:25:18:9a:f8:1c:3b:06:1e:2a:04:
b5:49:e9:63:69:3d:1d:2a:f1:99:ad:fe:57:1f:18:a5:eb:c7:
6f:70:45:6f:6c:05:92:d6:07:00:e4:25:09:bf:7b:6c:53:81:
4a:5b:19:a0:0e:07:b2:84:12:9e:78:fb:03:d6:a4:4e:24:9d:
d5:64:a5:85:6e:6e:34:75:5e:d2:b8:82:cc:23:7c:6e:b0:6c:
ff:67:2b:67:cc:95:ee:f1:4d:c1:d8:94:48:39:cd:0f:32:09:
75:24:35:13:0c:08:e5:38:03:ec:b2:5e:92:ba:77:11:4f:8e:
54:ba:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:31 2025 by rpki-client