
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: 8gYm9+ct3PgPmviP3VJHIQicSbSwdhOddsvFh+/bJ6o=
Subject key identifier: 9F:85:E9:A6:17:E3:21:4C:9B:CE:AA:ED:E6:FF:D0:6A:00:13:47:5C
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 0198D4DFCB3D0A6914039EF1BACA3822C49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 071A
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: iKXDFvucacY4jxTbVpui5QFuzYsTewqSQOQ90KswNeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cb:3d:0a:69:14:03:9e:f1:ba:ca:38:22:c4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=9f85e9a617e3214c9bceaaede6ffd06a0013475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:6c:4f:be:2b:67:65:3f:1f:3d:57:b6:18:
a7:41:b2:6a:35:cb:07:3f:13:1a:8b:27:66:07:3e:
e1:8d:16:68:4d:fa:f7:31:ca:92:41:55:d2:88:32:
79:62:ab:15:7c:95:06:b2:58:68:43:b9:a4:12:2a:
cf:e9:c5:c5:19:eb:26:68:42:49:1a:ac:e9:5c:d1:
52:a6:c2:47:a9:c2:1b:42:8e:34:d1:08:12:93:85:
d6:c8:55:c5:6f:da:2d:d5:75:e9:10:90:d9:28:29:
c3:c4:ea:3c:20:f2:47:a0:1a:96:d3:53:de:c6:84:
f1:5b:5c:55:34:32:07:c4:ee:90:cf:8e:9e:4f:9b:
a3:eb:bb:ad:f3:c3:b4:7d:b2:e8:e8:66:e6:4b:e1:
54:9a:b6:c3:40:c8:97:3a:ef:52:71:e7:b8:da:d6:
f5:35:c7:d5:7c:63:17:07:8d:48:fa:cd:34:e7:4e:
3b:c8:83:cc:1b:08:e2:7b:a0:bd:5e:28:c2:9e:c1:
3e:b3:96:a0:f7:9e:0f:51:2a:ca:5a:4c:1a:e6:c7:
ac:3f:ce:93:f6:4a:ee:79:38:0d:a9:ea:6b:f0:30:
ce:b1:8a:92:6c:2b:df:95:28:77:75:61:f1:fa:98:
de:cb:cb:c5:ed:6e:8a:ce:d7:dc:b8:eb:cb:26:fd:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:E9:A6:17:E3:21:4C:9B:CE:AA:ED:E6:FF:D0:6A:00:13:47:5C
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:56:47:87:1c:10:9d:52:75:8e:b1:92:ba:03:ab:cd:cb:
be:c3:4d:04:db:5c:ff:c6:a4:95:51:42:cf:4d:04:ef:fa:4f:
53:02:f5:bc:7a:c4:85:8f:58:06:85:90:f8:5a:36:c5:92:50:
78:2f:83:2e:63:db:d1:ce:b4:00:98:df:12:f7:a7:76:7e:aa:
ef:46:02:16:68:ac:4b:eb:8d:69:3c:82:f2:85:b6:4e:6c:a7:
5e:4e:aa:a1:a7:53:10:49:cb:9a:1b:cf:b1:8c:51:50:c3:bb:
43:18:70:a8:25:d2:f5:9a:7a:cf:1e:de:74:d2:46:71:ce:8c:
64:fb:db:ad:96:05:51:be:e5:f9:00:c4:aa:51:8a:23:b8:8d:
01:22:3f:2b:52:f2:d3:4f:2b:71:91:3b:39:60:f7:9e:ea:a6:
ee:51:d4:f2:74:bd:3a:16:47:20:14:49:28:67:6c:44:e8:4f:
d8:a2:1f:68:02:a6:88:d3:2b:96:98:92:ac:d9:df:56:f8:94:
d2:02:ec:69:ab:11:cc:bd:61:f5:c5:7d:df:e4:e0:d4:a2:33:
68:c6:c2:44:f5:78:a7:8f:af:1f:c3:d5:59:8c:a5:dd:86:48:
6e:63:f1:c4:2c:6e:1c:ca:91:58:d4:c8:90:9b:c6:6a:c4:12:
3b:18:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:38 2025 by rpki-client