Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: hlskcgtN0pJjR9xM68zF4Cn3l8IdLscyfU69BE99AJw=
Subject key identifier: AD:17:8B:61:E6:18:A0:F4:DA:B1:00:07:D1:32:05:83:EE:E1:AD:93
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 0198D4A785B41957E1EF81743B1D6372D73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 03C9
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: I8MKjzFEK6778dBzuGppIRLa53Lk3a205W0OtLSzd50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:85:b4:19:57:e1:ef:81:74:3b:1d:63:72:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=ad178b61e618a0f4dab10007d1320583eee1ad93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:9f:ff:8f:85:a9:e8:6b:b9:03:44:61:06:
d5:73:d1:bd:92:95:20:8c:bc:31:59:1f:ba:01:b4:
49:0a:f8:45:d9:c1:d6:7e:fd:81:27:de:f1:e5:e2:
da:8c:f0:a9:97:25:00:1c:2c:ec:b6:42:e8:7a:87:
a4:83:13:4d:b3:bb:63:a3:5e:35:fa:0b:62:49:2e:
f4:89:7f:a7:ea:ba:1c:e3:79:cb:d3:23:68:12:81:
4d:e5:32:86:a9:2e:cd:5e:e9:0f:3a:92:8c:3b:66:
e7:4b:e4:b0:bd:d3:3c:35:95:fc:3f:a6:45:90:0d:
29:33:05:44:c1:55:24:ec:16:2f:2a:13:84:c4:a3:
e2:ac:a1:cb:14:12:8b:ab:92:1d:7f:a9:95:4c:11:
ef:98:8a:98:b1:f3:22:0f:25:62:86:49:41:72:74:
c0:cf:89:39:aa:e9:20:0e:30:5b:5b:52:7a:24:a6:
eb:84:e9:3e:d7:e0:69:17:70:92:8d:e9:df:77:79:
3e:b5:b9:5e:3e:e5:29:17:eb:4d:ae:f4:87:d6:ed:
8f:95:4b:d6:2b:c9:42:ac:fe:4d:95:31:f7:b8:e9:
d5:db:c8:d8:a6:18:e1:f6:df:38:01:0c:0e:8a:55:
cb:9f:3f:88:03:ce:a0:da:71:89:c8:4a:5c:00:83:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:8B:61:E6:18:A0:F4:DA:B1:00:07:D1:32:05:83:EE:E1:AD:93
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:32:2e:b7:d4:26:f8:dc:2f:3b:e7:d9:cb:7a:5c:b3:7f:a6:
e8:e1:33:f0:6c:74:f3:09:72:fd:80:b8:29:c0:35:52:af:66:
57:9d:30:4c:60:04:d1:03:ae:60:73:48:32:af:48:b5:20:d1:
c3:de:71:a3:43:63:d4:d1:df:be:3e:71:59:21:be:72:68:8b:
81:4d:3c:03:bb:81:ef:c6:a4:50:f4:54:a2:6d:d3:9b:b4:be:
28:8d:28:1b:bb:7a:e9:22:f0:56:1e:f7:ca:4a:7b:0d:c5:dd:
0e:e5:22:c8:4a:de:9e:92:2a:78:07:a1:47:19:0a:fd:5b:af:
d7:cf:5b:2f:68:61:e9:75:03:87:69:e5:26:f8:6b:6f:78:f2:
88:4f:20:6e:4f:18:70:c5:95:e7:b2:83:30:ad:cc:2b:95:41:
8a:67:da:52:fe:7d:d4:9d:ce:e6:32:1c:02:f8:22:ca:13:b8:
af:28:bf:81:74:85:9d:e9:41:d7:27:f1:e2:0d:43:1f:c5:9f:
88:bc:27:d4:28:ba:26:a5:55:67:b4:01:be:bb:4a:f6:2a:a8:
87:81:3f:ad:39:f3:6e:6e:50:61:86:f5:75:4d:e0:5a:db:bb:
ad:29:24:0b:15:76:bb:57:8e:c6:57:af:66:7d:21:de:e3:f5:
b5:40:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:44 2025 by rpki-client