Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: EIzojLbfHnzVPnCTHe1zwrgNGBdZgyN5Eoc4nTsbhy8=
Subject key identifier: FC:42:6F:4E:D2:79:A8:0F:8A:B4:ED:DF:56:00:7D:F7:71:79:06:70
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 0198D7A94208006340E3B4970DA201B1EDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 16:00:50 +0000
Manifest this update: Sat 23 Aug 2025 16:00:50 +0000
Manifest next update: Sun 24 Aug 2025 16:00:50 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: ENlb69naolvWZfTJ2cv8BR6qkDlHojOB5rCLMX57UvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:42:08:00:63:40:e3:b4:97:0d:a2:01:b1:ed:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Aug 23 16:00:50 2025 GMT
Not After : Aug 24 16:00:50 2025 GMT
Subject: CN=fc426f4ed279a80f8ab4eddf56007df771790670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:71:09:d2:ec:c5:40:05:ca:03:f4:80:6d:
f3:be:0b:1a:ec:bd:33:e5:34:6f:ed:55:98:eb:4a:
6a:ee:0a:8b:4d:be:a7:2b:e3:3f:26:64:7b:f0:86:
00:cd:f0:cf:0d:79:9a:de:ca:00:5b:87:2b:83:9a:
1b:5d:85:8a:d0:25:3c:22:fe:e5:16:ef:10:77:e2:
bf:bc:9d:c4:e7:36:0d:97:0b:dd:db:20:d2:6e:4a:
6f:05:f7:5a:bf:f9:04:a4:0d:bd:03:4d:63:b5:7c:
cf:27:cb:f9:35:d8:35:56:2a:eb:08:dd:f9:d6:52:
68:c8:a2:d3:5c:e5:6e:92:96:90:7e:e9:03:79:df:
55:3a:1d:bc:e6:88:04:94:e3:c3:c4:b9:86:10:72:
2c:7f:4c:a7:2e:ea:9b:bf:5e:7c:ef:6b:01:cf:7d:
44:d7:ec:fe:1c:b3:06:21:26:81:a5:69:d5:fc:1f:
c2:32:b3:63:09:3a:52:4f:3b:84:99:8f:dd:c7:e0:
dd:2a:d1:02:26:f1:7a:b1:eb:2c:02:37:53:11:9a:
32:9f:c3:24:09:0d:cd:c7:34:d6:f3:73:72:d6:8e:
97:51:cf:58:21:99:d1:e0:05:37:e2:d7:c3:d9:54:
42:4a:ff:ee:6c:ad:1e:72:6e:54:49:4e:cc:f5:c9:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:6F:4E:D2:79:A8:0F:8A:B4:ED:DF:56:00:7D:F7:71:79:06:70
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:75:45:e4:39:5b:bd:25:57:2e:ee:8f:fb:a5:75:e0:77:
ed:8f:33:7c:e1:c1:d0:20:56:06:3c:c1:a4:69:87:d0:b5:b9:
ed:01:74:08:5d:9d:18:4d:63:6b:2e:2e:2a:3e:c2:66:37:c0:
da:0f:36:4b:1c:eb:74:53:9a:70:65:24:61:5b:12:18:fa:65:
82:2e:33:5c:1d:dd:9b:1f:44:13:0e:6f:56:8b:24:70:6e:aa:
5f:fe:3d:87:93:19:b1:2a:dc:11:25:06:fa:24:1c:f2:74:0f:
5a:64:f9:11:f2:61:48:2e:d1:b7:2e:56:b7:19:cb:b3:85:7f:
52:b3:08:4d:71:ff:e6:11:1b:b5:60:02:3f:fd:68:50:04:ad:
6e:62:db:5b:cc:ae:f0:24:5a:1c:fc:28:4b:85:e6:64:e9:f5:
8b:55:04:ac:6c:86:99:95:1a:a3:16:21:76:3c:e8:80:d2:20:
b4:ad:5b:f6:e6:fc:8c:a9:ed:de:db:9b:52:19:39:55:2f:a1:
a9:88:45:3f:fc:98:09:db:b9:ae:f3:04:59:b1:33:b2:8d:c4:
40:6a:2a:9d:2f:40:65:e9:43:34:1f:26:14:36:31:05:2d:56:
a0:2a:78:cd:9d:ee:6f:d4:04:a9:87:b0:f8:26:3c:91:44:02:
33:ef:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:21 2025 by rpki-client