Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: 7kuH4Js7PRNAmnjC3Fgp19wcsbo3RD7vHaCFn9wU68Q=
Subject key identifier: 12:4A:51:67:E2:E6:BB:50:24:2E:7E:EF:77:9D:B0:FB:1D:27:97:25
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 0198D65F0E5DAFE5BCA7C1B7E3D08B07633A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0B85
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: gE7ZrYbQNNhgt7b5bk4A6YTHNXllXW949jvu68TrOLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0e:5d:af:e5:bc:a7:c1:b7:e3:d0:8b:07:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=124a5167e2e6bb50242e7eef779db0fb1d279725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:2e:87:01:69:b2:5b:b5:fa:47:5c:42:ab:
f8:0e:22:42:65:53:dd:3f:53:4b:f2:fb:e4:03:2b:
a5:0c:dc:ee:58:5b:01:4f:84:1f:ed:c1:3d:77:dd:
b0:8c:de:17:e0:3b:ed:7b:b9:4d:43:66:4a:10:25:
e3:ba:2a:c6:61:0a:4c:6b:48:08:4f:79:8d:42:03:
5b:95:2e:75:1b:0f:ce:b8:a0:f7:75:b7:8b:9b:d3:
3f:22:bd:a9:87:99:1d:5e:3a:4a:67:84:d4:0e:38:
90:aa:8c:1e:47:cf:94:6d:ea:59:73:57:df:88:cf:
24:16:f3:8e:d7:bc:f3:a3:90:c7:29:4c:ce:47:09:
6f:8f:b1:05:6f:0f:66:cd:bc:80:68:ba:b8:fc:3b:
a0:2c:14:c0:55:c1:9b:55:4d:4d:4f:eb:40:d7:37:
7f:77:a6:9a:76:a3:93:a6:a4:e3:89:ce:a1:71:9e:
7a:9d:21:04:6b:eb:84:df:97:44:4f:74:ea:ad:3b:
e8:e1:77:e1:b6:6c:9e:11:1e:26:09:8f:c4:53:42:
4e:93:8e:dd:f1:8c:e4:29:25:b1:9a:45:fb:44:6d:
59:ba:15:4d:9d:e4:e8:37:0c:2e:f1:7e:5d:92:b2:
c8:ce:40:0a:92:69:ea:0f:d2:0d:5b:60:b2:84:36:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:51:67:E2:E6:BB:50:24:2E:7E:EF:77:9D:B0:FB:1D:27:97:25
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:0c:96:16:dc:d0:8a:53:c4:23:a9:00:6e:46:90:ea:8a:
fc:50:b2:a8:34:39:c6:53:3e:64:60:70:5a:e8:52:d3:0a:a5:
7e:9d:fd:f0:ba:d1:ee:38:93:bb:fa:70:17:1b:64:17:6c:31:
6e:ae:be:08:37:10:4d:1f:29:03:d7:eb:ae:ef:35:3f:c9:6d:
49:e6:ef:0a:93:ec:32:ba:fd:64:31:57:ae:5f:40:7a:b0:c6:
d5:a8:cc:37:e4:26:1d:be:3c:ce:ed:60:1b:3b:ff:0e:e4:52:
9a:0e:65:ab:8e:f5:a1:87:1d:64:fe:54:64:bf:18:89:38:c3:
c2:44:60:01:73:81:d8:62:7e:45:3c:3c:fd:44:eb:bd:26:99:
b2:1a:0f:a5:a2:8f:00:2d:2c:ff:7a:54:fa:93:81:cd:23:ef:
7d:46:13:cf:b0:ff:6e:cf:86:a0:4f:ce:0d:fc:79:de:6f:5b:
21:03:c3:b6:b9:73:e6:fb:58:cb:66:77:d2:8a:31:ae:31:de:
af:03:3f:57:a1:b3:c1:f5:79:a8:f5:13:94:35:52:b1:fc:22:
33:a3:2c:0a:7a:af:9b:60:0b:52:ba:9f:55:08:bd:17:c8:73:
5e:71:9d:93:d4:fb:49:39:e7:2a:50:7d:a8:ec:47:ed:56:30:
4b:e6:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:17 2025 by rpki-client