Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: lc1cF8cqikNShLmRJD8r3BJ4J8TNkoq50xCSye8ql5g=
Subject key identifier: EE:7B:A9:6B:3C:8D:1D:04:A1:C3:97:30:1A:AA:56:78:37:36:2B:E3
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 0198D66146F1C88D718AC31648ECE2B9F6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 0733
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: I9fAmHPai4H4Ctdrc8IYbsr54r9AMkr2Lspire9VrZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:46:f1:c8:8d:71:8a:c3:16:48:ec:e2:b9:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=ee7ba96b3c8d1d04a1c397301aaa567837362be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:79:b1:01:a6:12:67:22:68:13:b0:c3:2f:
f0:60:7f:3f:20:aa:40:6c:43:31:60:8a:d5:b4:f2:
88:b5:d9:33:30:29:0d:ea:c4:1a:2b:da:99:dd:8a:
70:fa:db:c8:38:17:71:b8:31:c1:a4:3e:48:a2:6a:
19:a2:07:eb:dd:e5:82:0b:f2:3e:cf:e5:0a:86:1e:
99:4b:4e:c2:72:eb:e4:94:e2:73:b9:ec:6b:13:92:
96:a0:67:b1:0a:bd:5b:fb:67:30:04:3f:6e:31:4c:
e6:37:fb:2f:60:f2:c5:7a:a6:f2:57:30:01:c2:b4:
a2:30:a1:19:b7:fa:6d:ac:75:a9:79:b2:7d:15:65:
f0:93:a6:17:92:e6:5a:9b:13:a0:15:69:c5:32:8b:
bf:42:f3:e8:91:d8:da:41:2e:a6:c6:73:24:63:45:
31:fe:e5:5b:57:59:22:a4:a7:ca:3e:80:ba:86:66:
1a:e3:de:84:04:03:49:c6:3f:eb:97:77:a0:b7:a9:
eb:61:f2:c2:bb:2b:07:eb:e3:36:cd:21:73:e2:a1:
79:a2:51:ee:86:ab:7e:be:7f:65:18:2c:9b:7a:db:
3e:6a:03:27:7f:70:ce:04:74:b2:ce:4c:f2:4c:be:
18:d1:d9:12:85:41:4a:f7:ba:e2:1c:f8:c0:39:f5:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:A9:6B:3C:8D:1D:04:A1:C3:97:30:1A:AA:56:78:37:36:2B:E3
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d2:f4:69:6b:62:4f:18:77:7f:84:fa:50:98:c6:0a:e2:cd:
15:e2:8d:7e:71:20:44:23:32:8f:b0:65:59:1e:49:87:71:6a:
a5:f8:a9:00:96:9b:68:5b:e2:49:82:ec:0a:17:b6:6d:ae:44:
c2:10:35:31:76:3d:57:b8:02:3b:ce:77:ff:e8:54:3a:47:f6:
25:72:7a:43:2b:a3:28:47:18:af:81:0c:67:78:da:94:6a:53:
72:3c:b2:01:ff:48:c4:6f:10:4d:79:ce:89:a8:9a:f3:4f:d2:
e3:7a:04:95:26:1e:ac:7a:b3:2d:02:48:14:4f:48:6e:12:e7:
f9:89:1e:55:26:e5:cf:e0:c0:12:85:fe:cd:8d:1a:d5:cd:b0:
fa:fc:fa:15:fa:76:6a:6a:48:2a:c9:62:0b:01:7e:b2:2f:c8:
49:ba:33:c4:2f:a8:0a:0b:11:ef:f7:8c:7c:3d:ad:0c:ef:f1:
04:88:84:68:62:45:1b:7d:da:23:2b:5e:fd:48:9f:90:83:c1:
88:36:7e:ae:c8:ea:f6:84:c1:e5:6e:33:cb:06:ca:2d:ed:87:
ac:2e:54:f4:85:b8:9e:ea:25:17:be:eb:92:6e:e1:57:7e:83:
f7:82:b0:dc:94:3a:03:37:d5:f7:71:b2:8a:13:05:0e:64:28:
a7:10:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:36 2025 by rpki-client