Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: +xFOCq+C790F0emznMNadAbhpqNhl125xLovBADfnTM=
Subject key identifier: F9:E1:95:84:2E:EA:A9:E5:32:5A:30:AE:90:6B:42:D3:B5:7E:01:57
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 0197B6A21DC79637E3471F06077403F8F0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 0882
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: FIpXBE4nVbNp/jlvZb+Ksh+JnL/sZzrlWgugOQjehQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1d:c7:96:37:e3:47:1f:06:07:74:03:f8:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=f9e195842eeaa9e5325a30ae906b42d3b57e0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:e4:cb:65:f3:3a:da:c9:1b:98:ce:5f:8a:
d8:fc:53:0c:3e:38:18:b5:d6:a4:a8:e4:da:f9:f4:
2f:13:09:47:02:b7:88:d9:51:4a:2b:8e:e4:da:de:
97:52:80:a1:a2:c4:dc:da:5e:51:77:0d:23:8b:d4:
b1:2f:54:85:e3:ca:44:bf:62:93:f8:2b:02:34:55:
7f:a9:67:8a:c4:8d:b6:0b:09:16:27:ab:5e:9d:a5:
b9:1d:31:1c:95:12:69:4a:e4:bf:61:bd:44:71:c5:
33:42:19:82:9f:05:b2:e9:c9:8f:ba:b5:be:7f:33:
80:24:9d:57:85:91:15:2c:f5:11:27:7a:9a:38:a0:
4f:12:fa:ab:2b:33:df:f4:bd:19:02:ab:94:2b:73:
06:c3:57:1b:d1:44:7a:75:15:93:7f:ff:b5:b1:7f:
50:23:52:15:b4:82:33:ca:03:c4:a7:7e:41:43:84:
c2:53:f6:b3:b3:2c:a0:b1:ba:91:fd:68:27:8b:40:
b5:e5:bd:3c:13:d2:8f:93:8b:5f:37:70:14:26:61:
7d:ad:e6:e3:5b:de:19:6e:c4:08:fb:f9:22:b4:97:
b1:4e:3d:0e:42:90:b0:4d:4c:ca:fe:25:ba:72:23:
4d:35:34:cb:90:3e:08:34:1c:ef:cf:d5:a6:a6:7e:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:95:84:2E:EA:A9:E5:32:5A:30:AE:90:6B:42:D3:B5:7E:01:57
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:9c:e8:ab:29:0f:94:42:ee:fc:f5:35:66:83:82:ef:30:
0f:7c:32:1d:a7:02:1b:4b:19:18:0d:25:f1:2b:c0:1a:c7:78:
81:6b:fb:09:07:5b:a6:9a:fc:ba:5b:e6:db:6b:cc:63:74:a6:
cf:39:2a:93:bc:56:5c:52:9a:1f:37:b2:be:80:96:6f:c1:de:
f0:4c:6c:69:53:c7:11:47:47:94:7a:58:48:d4:96:0f:a4:5f:
c1:d0:ee:df:c1:15:3e:fe:df:81:ec:c5:54:fd:27:bc:49:56:
f4:c1:df:70:e4:41:d3:b4:a9:8f:ba:d0:25:e2:b0:91:5c:4a:
ea:19:de:32:92:2e:80:60:91:1f:53:37:ea:1e:bc:b0:a0:cd:
ef:a3:75:48:75:0c:20:23:91:0b:8e:f3:2c:94:75:fe:d7:24:
c8:6f:62:1a:c3:67:f5:2b:5a:e4:0a:81:43:cc:1f:be:b6:d7:
30:e7:d7:81:ea:a8:5b:d3:75:a0:19:78:7e:75:e2:a2:81:71:
2d:c4:c8:33:d6:06:fa:b8:9d:2a:c9:e2:7f:25:6e:f3:56:13:
8a:60:29:97:9a:e2:70:cb:97:45:9c:99:40:fc:73:a9:ff:b8:
ce:c5:13:b5:91:e6:9a:cf:6c:bc:78:30:02:32:35:b2:0f:2b:
d7:46:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:08 2025 by rpki-client