Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier: Th0WOgbzNRFMsK9916h5ch9RMJPNAktaeEzkfk7YXUE=
Subject key identifier: 3F:D4:A5:1A:8A:25:93:83:E3:0A:7E:27:76:8E:90:29:7F:C5:C9:06
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial: 0198D5158D627FAD4A6A1D5C2B423B1F980D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number: C3
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: x9FEeJEQWQPoi1QlRZvDwzUnaiH6Gt3GfepdBMGmGps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8d:62:7f:ad:4a:6a:1d:5c:2b:42:3b:1f:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=3fd4a51a8a259383e30a7e27768e90297fc5c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:ff:44:1c:80:a0:34:d1:7b:d4:ee:e4:d2:
cf:c1:d1:56:f4:5e:2a:74:e6:3e:44:fd:94:4a:99:
c3:b8:86:3b:59:d1:95:34:f8:97:45:be:04:cf:ad:
94:74:f7:f6:2b:e7:b4:65:b4:2a:e1:cb:94:0c:e4:
54:7b:9b:42:8b:95:e9:82:4f:0c:76:41:4f:79:07:
82:9f:3e:cc:8d:3b:06:cd:9b:23:de:68:81:3e:77:
22:11:da:df:f0:55:f7:a3:2b:10:82:2f:7f:87:ff:
bc:57:df:bd:5d:40:1a:fa:e3:77:96:01:57:69:b1:
e4:b6:c2:82:1a:5c:25:ae:1e:fd:9c:66:21:9d:b9:
6c:d3:87:49:41:23:3b:23:38:e5:3b:51:8e:60:60:
36:e7:b0:c8:76:27:d8:24:df:1b:24:67:18:b1:26:
02:f0:3a:aa:16:1c:f7:2b:b5:09:66:3c:f4:9b:7d:
fa:75:a8:9b:dc:ea:bf:5b:94:81:ef:6b:de:4c:27:
47:e0:a8:08:05:87:30:93:f7:44:8c:55:79:4e:4e:
d0:29:5e:98:4d:5d:d8:be:29:7a:e5:9b:c3:74:bd:
06:d7:a9:7a:bf:51:8f:a4:d7:7b:f1:dd:6a:c4:19:
1d:a6:78:be:9b:1a:c8:c1:43:b1:1e:61:c8:47:3d:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:A5:1A:8A:25:93:83:E3:0A:7E:27:76:8E:90:29:7F:C5:C9:06
X509v3 Authority Key Identifier:
keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ee:dc:3b:f8:3f:23:da:54:32:39:fe:77:ad:19:01:ce:24:
77:54:7b:b5:b4:fa:ff:11:45:e8:f2:ec:02:0c:ff:2e:af:26:
7d:ba:b8:bd:6b:96:af:54:79:82:a1:74:df:9e:09:bf:59:b2:
e3:20:e2:75:12:23:50:d9:43:98:c5:68:7e:ef:9e:8e:b9:f9:
7b:28:ce:dc:21:48:27:e2:67:ef:4b:1b:19:11:40:04:c5:5c:
32:ee:e0:e8:eb:5f:3d:b1:87:e3:9f:a6:67:d0:ca:f7:8c:82:
95:29:0c:df:e5:6b:b8:08:b8:3a:e8:ca:41:2d:e7:92:b7:56:
0c:46:9c:b4:5f:1e:38:1d:4e:38:50:be:15:66:6e:03:59:03:
8b:51:9f:cc:97:9d:35:80:9c:2e:e9:26:c4:8b:3b:a2:45:32:
e3:04:0c:62:1a:0e:c7:1c:fe:d3:93:7b:ba:98:c6:1e:d2:9b:
71:ff:0c:15:29:cd:1b:ad:1d:26:35:5a:16:27:4b:cf:7c:cf:
fe:97:5a:23:1a:cc:7e:9f:b2:df:ce:d3:53:33:4b:8d:45:34:
e7:0b:08:f9:83:6b:b1:82:61:a1:1d:92:3e:1d:3a:27:09:e0:
ba:eb:df:5d:0b:0f:38:01:d3:d5:35:1e:3f:6d:b9:e8:25:92:
ab:e2:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:09 2025 by rpki-client