Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: bp9/G4AKM+dG50ABtc9x6Cg8kw7FEV96spBBq48rwPA=
Subject key identifier: 43:CA:50:E3:52:F3:DB:91:65:9F:6C:34:BD:36:8E:4B:9E:25:B0:F5
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 0198D5BB8CDE6E2868BCAD15DF1F3B5D88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 6B
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: af9gMyhmg/U6EQSLr1zSkYVykMcIWEv5KuXIpzvQc1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8c:de:6e:28:68:bc:ad:15:df:1f:3b:5d:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=43ca50e352f3db91659f6c34bd368e4b9e25b0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:00:4b:90:03:ba:ad:75:88:39:38:39:ed:
f7:86:83:b6:12:07:63:67:9b:eb:1d:5c:ce:50:e0:
2f:5a:9d:dc:8b:d9:67:02:62:8f:c0:be:59:89:eb:
37:bf:e9:89:38:0f:46:e3:0c:37:f5:a2:39:6f:95:
bb:26:e9:7d:ae:bc:df:cc:a3:93:21:79:cf:e4:5c:
32:80:7b:01:a2:95:f2:b4:c2:76:74:4d:ba:cc:97:
11:5a:d2:be:7a:ce:8e:fe:e5:4c:2a:d0:e6:d4:d2:
73:ed:32:6f:5f:3f:2f:58:ff:b8:5c:75:4f:ac:2c:
b9:fb:2e:e9:79:fa:78:7d:4c:cc:25:68:fa:65:b5:
65:13:62:09:4e:41:c5:2a:08:cc:12:fa:08:0c:e4:
f0:44:24:e8:68:63:60:44:68:2a:c7:12:a0:18:d6:
da:5b:4f:31:1c:2a:0e:95:fb:13:43:9c:ef:0a:f7:
ae:cc:fd:0c:b7:1b:b1:f6:89:e4:35:03:f6:55:ea:
d7:eb:b3:23:9f:73:90:99:83:4a:db:ec:f8:b4:08:
1c:fa:e5:72:41:e0:59:9a:17:d8:ba:99:94:26:56:
76:4d:64:f7:c5:d8:e0:6b:1d:59:0c:55:be:7d:4d:
9f:c8:fe:fd:b7:16:52:79:d9:f3:8e:38:d9:92:0d:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:50:E3:52:F3:DB:91:65:9F:6C:34:BD:36:8E:4B:9E:25:B0:F5
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:16:e2:e8:d7:87:5e:75:5f:e8:57:32:72:96:cb:68:5c:
13:76:f6:41:c1:9e:a7:36:f9:75:15:f5:31:87:94:e5:21:29:
bf:8b:7f:d3:44:68:9c:1d:d2:02:07:2b:df:7d:af:eb:fd:84:
7b:a2:60:de:06:7f:11:17:4e:73:58:75:df:d8:aa:9f:2d:48:
17:ee:17:b3:ab:d3:25:20:c6:e5:52:26:a8:2f:01:bc:57:3b:
5f:99:f9:50:a6:02:57:28:e7:05:9f:89:df:e4:e4:58:5f:43:
27:87:e7:5d:62:d1:7f:9b:1f:94:25:61:d4:84:02:49:8d:08:
05:cf:e0:55:57:95:97:52:41:c2:4e:e0:e6:35:13:6c:43:b8:
32:e4:8b:7f:95:7f:21:78:60:f2:85:e6:5f:a8:52:04:c8:f7:
2b:e9:3c:09:6c:89:26:63:5b:77:1e:63:1e:36:98:af:e6:f0:
c1:74:bb:cf:d7:03:7e:20:98:83:9d:2e:b7:92:55:c5:c6:45:
1f:da:6a:39:05:43:c0:fa:29:6f:4d:26:78:ce:21:87:f9:db:
a1:5e:1d:e9:4a:57:36:cc:ac:43:c0:b3:0d:ea:5c:9f:36:29:
1e:a2:76:20:3c:29:4c:c6:17:c2:20:d1:4f:30:de:9b:51:8f:
f1:0c:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:14 2025 by rpki-client