Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier: OhIPgUs+AviEZjLRiwlnpK+lUO7GEyjTA2aXeFy34KA=
Subject key identifier: EE:E5:81:C7:BD:7D:E9:0D:AD:63:D6:BB:46:4A:98:43:F7:7A:DD:5D
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer: /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial: 0197B745963348FC395D2F595B8E1C521EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number: 2F
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: a1xV2m2VinuxxmzCUHwrysl8uk81KgrhKtZQwzqW4dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:96:33:48:fc:39:5d:2f:59:5b:8e:1c:52:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=eee581c7bd7de90dad63d6bb464a9843f77add5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:09:cb:6c:04:35:e4:be:23:cd:e5:44:fa:
a7:e3:5a:5b:15:6a:e4:5f:0f:f8:73:63:d6:c4:37:
e5:90:2d:93:59:9e:d7:61:07:f7:c6:df:e7:cf:3b:
cb:21:d6:67:12:85:31:cb:6a:19:71:67:f5:cc:29:
04:f9:8e:da:d4:dc:98:fd:a1:0b:c2:1e:10:ad:50:
2e:63:d4:1e:28:ce:9d:46:65:c8:cf:59:5f:a2:9f:
fd:7c:b3:1a:d5:3d:6e:25:69:6d:28:0a:10:b2:1d:
db:67:78:e4:44:ee:c5:80:47:9e:91:10:ec:3b:f1:
31:ff:b1:a3:0c:cb:df:5f:cb:4c:0b:25:af:fa:ce:
39:96:6e:c4:96:97:2b:f7:14:0b:7f:46:39:38:78:
fe:b3:0c:b7:64:56:dc:54:14:ec:f1:49:8d:a8:c2:
05:1e:9d:ce:55:d7:b8:e4:ce:01:da:49:97:3a:bb:
1d:3a:13:38:d4:5c:38:9c:3e:41:ea:3a:6d:52:74:
59:16:b1:3d:1e:13:e7:e0:1a:51:64:9f:c8:75:8f:
5e:4c:4b:7d:83:52:35:3e:d7:21:b8:45:22:cd:72:
c4:e3:ff:a5:dc:92:f7:41:de:55:e1:8b:c8:bd:3b:
90:76:c9:de:11:70:bc:43:94:95:4a:2d:da:86:ee:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:81:C7:BD:7D:E9:0D:AD:63:D6:BB:46:4A:98:43:F7:7A:DD:5D
X509v3 Authority Key Identifier:
keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f0:83:5d:b3:2a:96:10:ea:fa:7b:4b:7e:74:c3:4f:39:b5:
79:32:38:f6:94:d0:40:f3:8d:8a:78:7b:08:5d:8a:d8:da:9b:
6d:60:c2:a6:67:e8:96:6f:aa:29:5b:5b:51:38:12:11:a7:97:
aa:ca:74:c4:fa:d9:c1:8d:dc:25:37:8a:bf:44:61:20:4a:64:
59:22:97:f7:d7:58:d8:a8:7b:c2:89:0c:77:31:0f:6d:5b:27:
7b:b1:b1:3a:ce:d0:4e:93:66:9f:fe:4b:45:12:b1:ab:5d:7d:
22:b2:a6:d6:f9:65:6d:ff:6d:e9:17:f7:5f:fe:68:a8:00:a9:
ca:8e:5b:c5:f4:62:98:02:28:a8:d8:c9:0f:0b:d5:0a:e5:1a:
43:f8:33:0c:1d:6e:2d:9a:7a:b2:31:2b:ff:4f:20:00:71:93:
9b:8c:a4:d1:8c:28:7c:76:9f:64:31:80:2b:e4:f4:4c:87:76:
2d:75:72:3a:fb:b7:9f:79:6b:cb:4c:26:d1:31:8b:9a:04:02:
08:ba:ed:7c:79:b8:b5:18:b6:20:b0:0c:a5:9b:80:7d:e1:83:
ee:f0:85:b7:80:60:91:d1:e3:41:d8:e2:bd:45:6b:e0:59:f3:
96:38:c2:19:1e:b0:6e:27:7c:0a:3c:42:83:36:a9:c3:e9:b2:
db:28:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:02 2025 by rpki-client