Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: BbJuu1Sbq/n3SzKUilPMIWP8PnbyuPomYyOqYiVYI7I=
Subject key identifier: D2:3A:97:02:E8:1A:AF:0C:CE:6E:40:15:6A:84:63:C2:04:28:48:7A
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 0197B7EAC8246881F144FB6159A6D2B182D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: f1NctXk9xMFUOJIeAT4l/X/tTZitgFAVAMqB1uoXaIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c8:24:68:81:f1:44:fb:61:59:a6:d2:b1:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=d23a9702e81aaf0cce6e40156a8463c20428487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:6e:d6:02:d0:52:69:2b:51:69:c1:ef:64:
e2:3e:f9:3c:4f:af:40:2a:3f:77:b2:1c:a1:9d:47:
9d:4f:fe:34:7b:01:66:18:5e:d9:61:a7:46:83:d6:
99:19:45:7f:9a:89:15:c1:9b:53:5f:ec:98:8f:27:
34:38:71:d2:a7:ac:6d:77:0c:24:f7:22:97:10:5c:
c4:ce:c5:75:fa:49:cf:b5:b2:80:41:6a:30:ca:35:
95:3c:64:3b:43:26:95:d5:d9:49:d5:39:9b:be:26:
76:fc:8f:f6:ba:7f:4a:83:81:62:ff:a7:a3:3a:54:
7a:68:9a:96:72:ba:43:cd:af:1b:fd:a9:0f:07:58:
d2:c5:0d:7f:ff:0b:19:ae:f3:68:da:21:7f:2c:e2:
60:42:ec:a5:7d:8c:12:70:7c:fe:4c:0b:60:17:02:
91:64:71:41:e6:63:9e:22:c0:c4:d8:52:9e:b5:68:
ea:ad:00:c6:36:83:2b:8e:fd:8d:13:8c:f2:22:d3:
bd:ff:d7:d3:49:3a:6e:5c:98:e3:d0:fa:03:14:1b:
c2:ce:51:14:dc:bd:64:7e:8e:e4:eb:5a:08:b7:1c:
21:c6:81:24:d4:0b:bc:fb:70:c9:6c:8b:30:7f:3e:
b1:94:dc:36:7a:07:b3:97:d3:80:e2:e4:c9:84:e1:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:97:02:E8:1A:AF:0C:CE:6E:40:15:6A:84:63:C2:04:28:48:7A
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:be:2c:65:c1:62:71:a3:fd:ad:d7:c5:1c:01:8d:96:ac:59:
2e:f4:cc:d1:4d:5a:51:34:c0:66:97:ef:f3:d1:1d:31:1c:1a:
6b:38:13:76:27:74:b4:da:b0:3a:cb:6f:16:f7:1a:f1:13:e7:
dc:7d:9d:eb:fd:1d:eb:44:a1:f2:e3:6d:cb:74:f4:a8:cd:32:
7a:ed:d6:2d:59:cc:81:58:be:c3:00:98:32:80:ba:4e:2b:62:
6e:52:ce:95:bf:7e:6b:29:57:5f:90:32:f9:a0:a0:34:5b:45:
bb:d0:4d:96:d2:f7:47:7d:f6:7b:72:48:ef:c2:ad:9c:9d:ff:
6a:71:4f:d1:57:b5:19:07:92:cf:ae:67:5c:57:09:3a:64:b4:
38:c6:1b:d1:5c:38:12:44:9b:28:75:02:a2:e9:c3:3b:0d:84:
82:54:40:b2:1d:79:9c:16:7e:b2:e1:6e:e3:c1:1e:e8:65:7a:
94:43:af:10:73:c4:83:73:72:3f:05:a3:43:f0:35:9b:6e:4b:
b5:8f:36:24:42:ee:c8:8d:78:98:42:74:68:5b:76:44:ae:00:
a3:77:04:8c:fe:93:cf:a8:37:32:72:a0:23:ca:75:c0:f1:08:
98:54:2b:3a:63:75:ca:3f:7a:f9:7a:1c:d5:27:b5:83:b5:9c:
cc:db:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:29 2025 by rpki-client