Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: h+5LiD1mRSNqOIeUUstErjDOEdmw6ZHpMzk0ux7e1dI=
Subject key identifier: 21:28:B7:E5:8C:86:88:86:A8:3D:FB:D2:29:17:09:F6:2D:AD:A6:69
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0198D4E0D9EB818BB698FF00468D0312370D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 093E
Signing time: Sat 23 Aug 2025 03:02:42 +0000
Manifest this update: Sat 23 Aug 2025 03:02:42 +0000
Manifest next update: Sun 24 Aug 2025 03:02:42 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: Dpur9Xh1HUjtalG111cH0wvgHMg+0gWjrLmBmOjDLoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d9:eb:81:8b:b6:98:ff:00:46:8d:03:12:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Aug 23 03:02:42 2025 GMT
Not After : Aug 24 03:02:42 2025 GMT
Subject: CN=2128b7e58c868886a83dfbd2291709f62dada669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:32:42:87:6b:84:fd:c2:a5:77:68:1e:8d:
e3:62:57:eb:dd:6e:0f:73:87:67:47:dd:78:6a:7e:
20:2f:d7:be:2e:b9:ae:90:7c:b8:b5:04:b4:71:b8:
88:c7:aa:4c:f2:5e:07:92:89:ca:9b:6a:ff:ab:e7:
31:e0:45:33:38:be:cf:86:c8:3f:b8:2b:81:1c:a3:
e3:16:75:d3:fd:3d:10:62:fe:75:cf:00:9f:ff:21:
29:47:db:7a:fd:e3:cc:e1:25:7a:96:91:d8:fd:6f:
50:66:de:ab:9f:c3:99:6c:a9:88:32:0c:67:10:cf:
93:62:ef:cc:88:ad:3e:4d:e9:16:5d:ab:dd:9c:98:
6c:12:14:f0:32:db:cb:a5:0b:d1:1a:95:9e:b8:a7:
f9:c9:c5:8c:60:67:38:a6:a9:aa:31:9d:98:47:ae:
4b:54:85:71:94:c3:63:3c:bb:02:f4:58:8c:84:54:
7a:b0:d3:88:b7:44:24:dd:40:6f:50:92:0c:1b:77:
c2:0c:20:88:ef:f3:6b:1a:12:76:cd:4c:24:c8:54:
b9:c8:0d:dd:91:3f:8f:28:99:cd:d8:81:2a:3e:4f:
50:3f:be:3f:60:13:89:c4:c4:70:79:7a:d6:61:94:
3c:96:1b:0b:b1:de:fd:9d:8c:7f:25:12:51:4c:f2:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:B7:E5:8C:86:88:86:A8:3D:FB:D2:29:17:09:F6:2D:AD:A6:69
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:54:cd:75:49:f3:c4:c9:36:0d:c0:62:c3:76:ca:7b:ce:86:
ee:d9:67:fb:f6:9a:0b:55:eb:d7:85:5a:49:0d:10:71:0d:21:
b6:7f:26:ed:a1:87:a2:30:ce:ab:3d:0e:3f:e0:56:0b:40:1b:
b3:35:e3:9d:3b:56:b6:f9:6e:8e:99:c5:2a:ac:48:90:a5:87:
21:6f:84:fd:a1:77:eb:cf:7a:ae:63:9d:4f:58:df:ba:1a:ca:
84:4c:98:a2:95:2b:33:92:0a:f6:1a:c6:54:a1:6f:f8:c6:c0:
71:2d:39:57:32:f7:84:54:80:3d:3f:12:ed:a6:a5:ce:83:6e:
c0:f2:38:c7:3b:4f:66:81:85:4e:f9:8a:27:7d:08:b5:9d:24:
b9:44:65:ad:0f:65:2b:12:85:f4:b8:ee:e1:00:49:1d:03:63:
e4:11:89:72:ad:14:31:61:99:9f:58:80:d9:97:c4:0f:31:77:
19:46:78:05:af:56:68:31:34:43:35:83:ab:48:08:ff:b8:d1:
49:56:b6:2d:07:0a:6a:94:03:7c:75:15:ae:27:23:4a:85:df:
06:9f:6d:49:9c:0f:04:ae:3a:35:9b:f0:32:3b:48:b3:2a:bc:
86:9d:60:60:dc:70:c7:b8:3c:ea:5d:ec:fc:2b:5d:2e:28:0b:
50:af:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:55 2025 by rpki-client