Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: MfnYOZimXavRGg5v9X1rihh0V44qgswH20ncwjzqgoc=
Subject key identifier: 83:12:87:9B:6B:80:6D:A3:E1:7D:BA:64:54:DE:72:B0:8A:23:F8:37
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0199FC589B5EBDD6F19810A2A7EFF9AFE9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 09D7
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: HExILWhnPiLPV+/Bc27KIknLYvBXknCoKmnfboD9ARE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9b:5e:bd:d6:f1:98:10:a2:a7:ef:f9:af:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=8312879b6b806da3e17dba6454de72b08a23f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:c6:9a:ce:4b:bc:68:76:a0:f0:55:85:82:
17:53:97:88:71:06:34:6f:04:04:01:d2:7b:df:9f:
af:80:89:5d:9d:19:e4:0f:90:50:32:17:f4:6b:a0:
2c:3f:75:ee:14:bc:b5:38:1b:ed:85:9b:c2:57:1d:
58:14:f9:4d:e6:6f:a4:ec:47:fa:70:3b:6f:83:e8:
c7:61:e6:04:ea:bc:75:c0:f2:c0:f0:f8:e0:3c:11:
0b:cc:d9:99:72:84:42:f9:29:81:de:71:d9:bc:4a:
87:93:34:13:a0:ac:81:f0:7f:df:6b:47:b1:3b:b8:
51:53:44:80:ed:b5:af:a5:57:2a:24:96:35:e4:6d:
5c:0e:02:9e:08:99:a4:c5:7c:9d:5f:60:c6:4d:8a:
89:9b:43:a0:8e:cc:1e:2b:f9:75:81:78:2f:b4:d0:
26:59:eb:47:25:00:97:6d:d8:82:c3:7b:5f:4e:ab:
81:a1:38:c1:d5:40:ce:32:23:7f:f1:88:ca:3c:7e:
ba:07:92:7d:b9:f9:8e:ba:7a:3a:a7:ee:9e:93:bf:
ee:ee:48:ae:5c:2d:ac:c8:7d:dc:4e:6c:29:5b:a0:
85:25:46:20:65:17:21:e5:d9:00:63:ec:3c:7f:31:
e3:de:0e:48:10:7f:26:d7:29:83:56:4b:cf:8a:69:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:87:9B:6B:80:6D:A3:E1:7D:BA:64:54:DE:72:B0:8A:23:F8:37
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a6:97:d1:d8:0b:41:c8:a9:ff:ce:a0:4c:fe:0e:24:8c:e1:
c5:58:50:33:0b:c0:0f:25:da:ed:42:ba:6a:ef:6d:7a:dd:55:
fb:af:b0:66:2e:4a:e5:ab:4f:16:15:94:72:43:95:a6:83:c6:
ad:4c:b7:f8:d2:b2:89:e0:30:fe:bc:48:04:73:ab:81:35:76:
39:39:ba:7d:69:c7:1c:6f:d3:c9:6c:16:3a:d7:d1:c3:29:09:
d5:31:a1:b3:af:12:f1:52:ad:74:7b:2f:b1:7d:4b:11:52:db:
65:f4:1c:f9:c5:96:8f:e7:a9:eb:5c:c7:a1:aa:e5:c2:f0:02:
98:d8:f6:65:d3:0f:b6:a5:ba:05:84:0b:b7:5c:3b:46:ad:9e:
12:fb:e3:d6:ff:43:c3:06:25:92:58:e1:21:bd:13:b5:9a:a4:
bb:99:a5:68:56:a0:da:d0:94:52:f6:78:c2:db:95:38:a4:fc:
99:18:68:48:a0:67:a4:c4:56:94:8e:2c:43:9c:c7:61:0a:54:
3a:67:38:43:75:72:1f:3c:e7:9c:5b:b2:bc:72:e4:f0:e7:36:
00:46:00:c9:13:9f:d4:1e:9e:53:85:81:52:fc:3e:d7:16:23:
95:74:bf:a3:51:e2:cd:5f:7b:90:3c:b4:63:4e:61:1e:dd:0e:
4b:6a:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client