Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: gy1NVMw8bO2p6rfNlA4pSV/X4NBiIHu3MnGV4iM759I=
Subject key identifier: 28:E0:25:08:32:DF:1D:CB:5A:8D:93:EF:BE:A6:69:9E:CA:C1:B0:67
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 019848C0CF6FEB2E3FBB5576D8B9E45AB813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 10D6
Signing time: Sat 26 Jul 2025 22:00:52 +0000
Manifest this update: Sat 26 Jul 2025 22:00:52 +0000
Manifest next update: Sun 27 Jul 2025 22:00:52 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: 9qm5SzNzZcht3dLZIyJpKjMMjJc/UVpz4i9O/o72KiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:cf:6f:eb:2e:3f:bb:55:76:d8:b9:e4:5a:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Jul 26 22:00:52 2025 GMT
Not After : Jul 27 22:00:52 2025 GMT
Subject: CN=28e0250832df1dcb5a8d93efbea6699ecac1b067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:14:29:ac:b5:37:cc:9a:b6:8c:17:8a:dc:
f3:c4:0a:98:08:39:de:6a:8c:db:7b:36:c8:ea:c5:
61:5f:02:ad:e8:eb:64:df:b7:71:de:16:7e:15:8f:
c9:e8:0c:2c:f3:b9:0e:ad:2f:92:7d:7f:2f:67:19:
5e:d9:63:45:a0:be:e5:dc:c5:47:de:01:17:a0:d3:
87:c9:57:5b:14:ae:4d:13:12:06:23:f4:c0:3c:85:
c0:71:86:84:b3:47:8e:01:03:60:b6:04:97:42:e0:
5d:7a:c2:dc:d2:f3:9f:be:6f:e9:dc:3c:15:c6:1c:
0a:63:f8:c0:13:70:fa:9d:00:c1:cc:98:46:75:fb:
b7:3f:d2:40:47:c6:b7:9c:99:94:ef:17:5e:5b:30:
6c:a7:c9:eb:f6:df:8e:78:0e:28:c7:1c:b2:e2:d4:
c6:7f:0a:e4:c8:9b:f3:a7:46:35:e8:c6:66:79:40:
79:d1:5e:79:c4:44:e1:3d:fe:fc:9c:42:25:c8:db:
b6:29:fa:56:6f:c6:25:c9:02:53:d3:a5:a4:95:a5:
4b:f5:90:ca:66:ad:f7:15:2e:24:b4:b3:07:94:df:
20:97:2e:39:79:2d:3b:cf:57:e8:7f:e0:1a:96:61:
e9:d6:93:56:1d:7c:3f:5b:20:bd:41:7e:23:be:eb:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:25:08:32:DF:1D:CB:5A:8D:93:EF:BE:A6:69:9E:CA:C1:B0:67
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:35:4e:04:72:fe:b8:d8:e6:3a:17:20:75:36:99:72:04:
f8:84:91:06:21:9f:f2:f0:81:11:b1:f9:e6:1b:9f:6e:33:1c:
5a:68:fd:09:5b:50:53:27:e0:86:c6:25:5f:cb:f5:48:b2:ea:
87:44:2c:21:e7:f8:a4:a2:5a:e3:21:05:45:a8:82:fd:24:d7:
1f:fc:c6:34:cf:1d:55:26:c2:e3:00:00:06:d6:95:10:36:04:
74:9d:73:a7:63:a2:b6:ec:58:93:5e:9b:00:78:9d:1b:ea:82:
a0:bf:a0:04:4a:bf:3d:8f:e8:77:ac:6d:0a:5f:cf:e3:0c:0f:
72:25:cd:2a:09:c9:fa:d2:6c:02:a3:db:15:ab:d7:df:bc:26:
5a:c2:89:04:23:a6:de:c9:fd:93:f3:66:38:73:ce:aa:eb:1f:
7a:a5:35:94:8b:c7:c5:a2:5e:bc:4a:3c:e1:5a:d5:c4:45:13:
0d:da:a4:e1:97:b1:97:86:32:62:6b:71:c3:65:75:1c:fb:0b:
ca:79:c6:ec:59:54:11:37:bd:a7:91:af:3f:01:d6:0f:ad:5c:
78:35:17:63:15:83:a1:52:48:75:9e:d6:c2:e2:0c:eb:32:f0:
0d:d0:16:d6:e5:eb:d9:9e:01:0a:1c:a8:8b:53:3e:e6:b6:04:
ab:95:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:34:59 2025 by rpki-client