Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File: Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier: jbsFnbRW6OT63/hA0fqntHoQNMLKRKd+HWCNb76Z47E=
Subject key identifier: 68:95:5A:BF:E4:FC:73:76:0C:7B:00:72:3F:2D:A2:B6:FA:65:8E:E9
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer: /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial: 0198D660F6201F1706ED90935667341F05D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: GAOVFMHMkdDn3gLQ8gY6o5ssVjCqsYN8zmG6IEA10mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f6:20:1f:17:06:ed:90:93:56:67:34:1f:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=68955abfe4fc73760c7b00723f2da2b6fa658ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:5f:62:fd:a8:7b:20:5e:f1:9b:ec:63:b0:
3b:8a:39:8c:90:65:57:b1:2b:7b:f4:f8:05:b9:7b:
4b:df:4b:8d:d4:60:22:ec:e1:51:d0:e1:20:b8:4d:
48:a2:24:69:75:4d:1f:56:a4:7d:36:83:b1:17:5f:
32:a1:70:e7:b7:ee:86:33:4d:0d:d1:08:f0:3d:26:
29:d0:c4:da:e5:1e:64:82:1c:55:38:42:8e:76:e5:
cd:74:22:00:e3:95:fb:7a:5e:f8:fc:6e:be:06:5d:
62:6b:1a:26:0b:bf:0d:c5:8d:0f:e8:c6:6b:5f:a1:
84:08:aa:fb:0d:8f:a2:e8:d5:fa:1a:6f:21:a1:b4:
74:fa:3c:d9:97:e2:d5:11:9b:df:6b:69:be:d1:c6:
e0:d3:04:2a:ea:cf:c1:a8:25:a4:ce:b6:44:e0:d4:
d9:0d:c2:16:8c:51:9b:ff:f8:4e:6a:74:a9:03:1f:
ac:c5:7c:08:21:2c:56:da:21:4b:45:a9:60:23:ae:
1b:86:ef:4c:cf:cd:1d:a5:37:f3:6d:a9:ff:50:0f:
6b:71:e4:24:a6:72:7b:b3:6c:2f:cf:65:c8:30:81:
9d:f0:9c:37:9f:ff:26:a5:a1:94:fb:55:cd:ab:a5:
ce:6e:b1:15:20:f8:cf:36:38:7b:b7:ca:97:6b:f2:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:5A:BF:E4:FC:73:76:0C:7B:00:72:3F:2D:A2:B6:FA:65:8E:E9
X509v3 Authority Key Identifier:
keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:51:c7:e8:fc:34:3c:98:57:a7:e5:c3:01:15:1a:8a:eb:
57:95:d7:a3:5c:3c:48:5d:92:c4:c7:77:72:1b:23:04:44:d3:
80:1b:85:56:58:23:9d:c2:20:cb:c8:5e:c1:12:f3:9a:3b:5e:
c2:38:fc:54:5e:33:79:da:06:a0:58:62:19:7b:ba:a2:ab:30:
14:54:90:cb:ee:1e:04:fc:e2:74:d2:0c:72:8c:8f:64:b9:c1:
cb:99:fa:d6:66:d6:a8:6a:db:af:f9:96:20:d1:66:d9:a1:98:
5f:63:d7:b9:f6:45:2f:e6:d2:5a:32:a5:8b:5b:d6:43:cb:3b:
3a:7e:26:74:f4:7b:a1:1c:ba:0b:ce:15:9d:17:10:47:42:bf:
f5:11:fb:6d:f9:12:88:ec:8c:da:00:19:1a:78:10:a3:4c:f8:
cc:71:7f:50:0c:27:7b:c3:6c:5b:00:bb:87:a1:34:8a:1c:52:
65:30:07:0e:30:f1:bc:c3:8f:a1:98:f0:a2:65:39:de:52:0f:
e8:7c:ec:12:f3:6e:47:83:94:83:1e:c1:c7:70:bf:19:81:ee:
3d:34:5b:62:94:34:38:ca:1a:83:96:43:14:c4:da:11:2f:b0:
f8:2d:68:4e:1a:12:c6:0c:b6:c3:a0:75:14:5a:ec:df:93:9b:
c1:c9:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:23 2025 by rpki-client