Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier: JXQ2TIwkIjaNjS9MS4kQ2Mvb8zQsHjxNU5tAvztEwgQ=
Subject key identifier: 59:F0:04:A6:0A:D3:9B:14:DB:E2:02:B8:EE:A1:39:31:FB:66:34:81
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial: 0198D4741195418EF314650417A271326F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number: 087E
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: ql0kRsCGqRjQvp8W0KiHc718p3VYdoaqHyfmludZdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:11:95:41:8e:f3:14:65:04:17:a2:71:32:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=59f004a60ad39b14dbe202b8eea13931fb663481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:b0:bf:cb:a2:e9:ff:5a:a1:e1:38:25:3e:
9a:88:ec:98:2c:d0:cc:60:5f:f7:36:81:b8:9e:14:
42:54:00:50:9f:a9:26:cb:a3:13:61:b0:73:51:10:
cf:12:c5:36:7c:78:a8:1e:6f:f7:23:bf:3f:81:d4:
76:bd:c2:e1:f4:72:51:07:98:28:43:c4:8e:58:6d:
a0:2c:19:62:f0:b8:eb:75:e1:ff:0b:69:ab:cf:a3:
ee:dc:f5:c9:21:78:51:fc:84:01:fd:2f:b9:f9:a0:
61:e1:d8:96:72:f5:04:f1:b9:8f:c9:ff:a6:40:2e:
0a:8f:76:6c:8e:99:cc:5d:db:68:59:40:53:84:dd:
3c:97:23:35:75:06:4b:33:bf:9a:83:89:8b:7b:76:
6d:ec:9d:d3:e4:2d:9f:22:9d:40:00:59:7a:11:37:
67:cd:87:3d:d9:84:b5:0d:9d:ef:3e:bb:5d:68:4a:
0b:52:5b:17:b5:29:27:fd:a7:a1:39:ca:f2:bd:e0:
8a:c4:98:8e:33:e2:95:95:3d:8a:03:06:71:57:5f:
96:41:e8:00:ef:cb:96:81:63:eb:60:37:9b:12:69:
8e:a8:5e:aa:d5:16:78:c3:7c:ca:5e:5f:85:13:62:
81:be:98:88:bd:14:a5:93:43:be:4c:dc:11:77:82:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:04:A6:0A:D3:9B:14:DB:E2:02:B8:EE:A1:39:31:FB:66:34:81
X509v3 Authority Key Identifier:
keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:73:e4:13:f1:f5:8d:a5:46:5d:e4:fd:e2:11:80:cc:a3:
c0:58:e0:97:4a:31:62:e2:e0:8f:03:44:ba:65:6f:c5:f3:2b:
f7:ed:4b:50:01:86:ed:71:9e:44:5e:20:47:5b:ad:02:86:74:
57:10:b4:22:33:9b:92:e9:3b:a6:d2:ca:88:55:f9:d7:11:9e:
d0:6f:1d:ad:f4:26:03:25:e2:8f:0d:29:c0:04:13:08:0a:e0:
58:43:22:1c:57:17:e7:8f:1f:c0:73:b4:b8:c7:28:40:df:2e:
7c:13:fb:43:a8:65:09:38:03:34:38:a8:ba:f4:b8:86:7c:e2:
a6:94:e7:92:42:71:be:81:fa:8c:29:92:61:fa:5c:15:74:e8:
d7:f5:45:87:91:1f:e3:8e:69:19:50:0d:a9:cd:93:63:b0:d4:
42:db:49:49:6b:00:aa:d9:a2:35:a3:95:a9:04:b3:9e:a5:ba:
aa:f9:56:7d:81:38:10:62:43:d5:73:57:69:f5:26:4b:69:2c:
5a:b6:7a:58:c5:36:05:ed:c0:3b:60:44:f1:4f:da:8c:42:f1:
dc:79:24:37:5a:08:fa:48:d3:44:48:f4:97:74:3b:e0:34:b9:
e3:fb:cf:64:1e:5b:5e:a5:ea:44:d4:a0:e8:7e:9e:cf:26:7b:
da:ed:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:08 2025 by rpki-client