Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: MMj0MxHUgEjbyqvzE5UhMGBXrDlWUSGCqPLX/fR519g=
Subject key identifier: EA:5F:24:48:BB:1F:6B:7F:6C:AC:09:A4:D1:7D:74:74:18:52:10:8E
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 0197B6A0CD2740347F478BEFBA9AF2BD4AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 069E
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: uT81q94lNo0U0iKMkHqbWlpcroEd41vucYF9MiHnYSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cd:27:40:34:7f:47:8b:ef:ba:9a:f2:bd:4a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=ea5f2448bb1f6b7f6cac09a4d17d74741852108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:44:7e:0c:2d:fc:75:49:f9:96:70:f7:a1:
4a:0b:10:8c:4a:fe:da:ab:7d:29:8f:75:68:17:e3:
d1:18:3e:e3:17:fd:16:fa:8f:e9:0e:2d:1f:50:6f:
1a:ce:31:92:06:90:b6:46:c8:a4:e4:0e:f4:4c:fd:
b2:a6:e7:48:78:08:a8:fd:3b:62:5a:fc:a7:cd:8c:
39:aa:08:ea:69:ac:90:4f:cd:40:d8:3b:f0:e4:1b:
98:f7:18:ad:eb:05:2d:4d:24:2d:62:31:06:e1:44:
e7:f5:fe:18:15:b5:a4:66:63:f2:ea:51:e2:b5:9d:
c9:8d:93:af:b5:d2:a7:ca:35:9c:65:90:0d:77:8e:
86:1a:6f:ac:f7:49:02:6a:10:83:e3:c0:ab:0c:8c:
8a:07:da:1b:c2:5c:8f:5a:1b:35:6d:13:02:d8:f0:
06:7f:1b:c6:23:ad:2f:07:29:96:8b:14:43:4a:d1:
c7:be:2f:7b:3c:4a:23:10:05:af:8c:ea:41:d3:04:
50:ef:8b:7c:11:87:b3:95:f8:b9:8f:1a:43:bc:6c:
95:da:aa:c6:7e:63:0d:ee:fa:7e:9a:93:4b:e5:72:
88:c3:5e:e6:b1:a0:1c:ff:70:e3:08:7b:00:0e:5e:
ae:ef:b8:70:f0:c9:70:75:57:71:91:d9:ff:fa:01:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:24:48:BB:1F:6B:7F:6C:AC:09:A4:D1:7D:74:74:18:52:10:8E
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:06:11:7d:28:76:67:66:cc:92:e2:af:35:fe:ea:b2:fc:
43:6d:a3:bb:44:c3:73:fc:a5:ec:bf:3a:c2:98:f0:7e:b8:a2:
d2:ee:12:25:15:d1:68:da:e6:10:13:35:2c:36:13:18:06:11:
e2:41:78:80:7f:02:29:a9:52:ec:10:16:fc:93:6b:de:f0:39:
51:55:b8:17:9f:58:76:46:9d:99:d6:e2:85:a3:ac:24:02:6d:
23:bb:db:4a:b7:8e:56:fe:e2:3a:42:86:6e:e6:ed:2b:04:b8:
57:13:9a:b8:e1:ae:2a:86:1d:c8:6a:44:e7:4a:7a:4a:73:cc:
45:4d:dd:a9:32:3d:23:eb:3c:32:4b:a3:b3:de:86:55:b3:95:
6a:75:8f:8d:70:66:8e:d6:0c:2f:b4:9f:c0:81:73:20:2f:88:
6a:4a:a8:72:7c:7f:e4:18:f6:24:fd:20:4e:72:e1:11:90:e9:
35:38:f9:7f:f0:04:4d:85:ee:05:9f:9d:ea:30:35:0a:e7:6d:
1a:61:8c:c2:7a:75:1c:75:68:13:6a:06:b2:b3:4a:58:a6:f5:
9f:ea:c2:f2:c3:cc:d4:f3:9f:a4:ca:ad:af:69:51:c3:41:73:
33:90:db:cb:7e:8d:2e:42:80:b4:70:b8:ec:2f:8e:bf:0d:89:
54:84:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:25 2025 by rpki-client