Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: d6x8CXFvdPM/9f33d0KzpkYjoZlb3siAOrAmqhUbf2Q=
Subject key identifier: A6:94:E9:17:74:1A:3B:61:40:56:1A:6F:99:D7:92:8F:3A:F2:A1:B6
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019849D30B9BC3732AA52B474655D8EBBE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 093E
Signing time: Sun 27 Jul 2025 03:00:24 +0000
Manifest this update: Sun 27 Jul 2025 03:00:24 +0000
Manifest next update: Mon 28 Jul 2025 03:00:24 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: SbzZ5HDHG1JlehTEWsdjikiidOhg4dIC3DLtzupHP8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0b:9b:c3:73:2a:a5:2b:47:46:55:d8:eb:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Jul 27 03:00:24 2025 GMT
Not After : Jul 28 03:00:24 2025 GMT
Subject: CN=a694e917741a3b6140561a6f99d7928f3af2a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:28:4a:52:ef:ff:1d:47:39:fc:e0:cf:85:
1f:48:7d:20:05:70:8f:da:ab:a0:b9:a5:1b:79:43:
7c:96:89:0f:00:80:55:1c:ad:fd:11:24:73:fa:19:
bd:08:27:60:72:80:b9:33:49:22:ee:3e:df:dc:95:
eb:e7:55:25:c2:ed:84:31:80:7b:50:bc:34:92:a6:
62:6a:2d:c0:eb:a0:d0:a7:df:25:00:cb:2b:98:3a:
ae:d9:f4:d6:b2:cd:36:72:cc:84:d4:dd:d3:7d:0d:
be:d5:82:0e:da:08:bc:de:18:d5:85:63:96:fe:f2:
12:f3:32:b7:fd:88:70:87:cf:fd:2b:2e:88:5d:95:
fd:24:a0:d3:fa:63:26:ab:31:94:a2:b4:8a:b4:ce:
8f:55:52:4b:f6:85:ff:70:5c:ed:97:06:b5:7d:f2:
1a:8c:87:c9:74:15:79:3f:65:e9:4d:fd:fa:94:5c:
80:68:5d:ce:80:e6:6b:90:88:8b:f3:da:c9:e5:4f:
d6:a0:21:3d:5d:ea:fd:b6:0f:23:44:c5:b4:47:a8:
74:29:7c:4e:9b:f6:09:fd:f3:47:c1:de:8a:24:d4:
9b:2b:dd:09:1c:2c:5e:fe:9e:7d:da:f8:00:5e:67:
31:94:dc:da:e0:0e:7c:ca:27:ff:80:ce:7d:d5:d0:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:E9:17:74:1A:3B:61:40:56:1A:6F:99:D7:92:8F:3A:F2:A1:B6
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:1e:b3:33:ee:51:bb:a4:7c:4a:27:b8:48:00:01:d8:f1:
93:dc:a9:92:cb:3d:69:1a:1a:c3:1f:c1:b5:4b:dd:0d:be:70:
b1:12:d3:71:24:2f:5f:ec:98:87:25:89:7a:a6:28:07:64:5f:
ea:c7:5d:12:32:80:01:8c:83:75:ef:86:b0:7d:84:6a:00:47:
26:4f:69:87:d8:4d:79:6c:4c:d3:47:e8:eb:cf:10:d0:7a:35:
c5:dd:c6:78:05:8f:6a:4e:3b:b0:7c:7e:83:92:a8:e1:0f:cc:
48:2b:87:2d:57:62:b7:24:73:1e:a9:dd:4c:d6:9a:7e:8f:93:
48:28:ed:e9:e1:c6:20:78:8c:da:2d:72:ab:f6:41:34:91:cb:
55:18:b4:f0:bb:30:ee:00:18:cd:5f:31:37:88:3e:54:f1:78:
a5:f9:96:a5:7d:c5:e8:e2:46:50:14:a5:02:f5:48:a5:76:6b:
97:72:80:35:03:4c:ce:e6:9d:24:3a:f9:fe:bd:70:43:b4:ae:
cb:64:8e:11:80:87:d7:1e:74:b2:7c:aa:7a:97:9d:e3:b5:52:
01:82:03:0c:54:66:e5:4c:b5:11:3e:92:4d:3e:b6:fc:1c:19:
ed:b4:60:75:5b:09:da:85:74:48:9e:d5:a6:99:88:31:b5:2c:
88:d3:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:44 2025 by rpki-client