Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: rD6ZP9A0K+PfTECLo+WnGwim4Ao+J2rjlt+xMrZiWpg=
Subject key identifier: EC:CF:18:9A:AD:E4:4D:77:61:A9:D4:B9:DE:9A:3F:CD:52:2C:CB:67
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 01983D29D8FB069C545F50C15AA1F6B92C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 07A2
Signing time: Thu 24 Jul 2025 16:00:09 +0000
Manifest this update: Thu 24 Jul 2025 16:00:09 +0000
Manifest next update: Fri 25 Jul 2025 16:00:09 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: OX+ndNkjlrWWSTPahOqgfqJXEUts7rxJFF+YM42s66A=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:29:d8:fb:06:9c:54:5f:50:c1:5a:a1:f6:b9:2c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Jul 24 16:00:09 2025 GMT
Not After : Jul 25 16:00:09 2025 GMT
Subject: CN=eccf189aade44d7761a9d4b9de9a3fcd522ccb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:97:5a:dc:6e:63:6d:82:f3:45:e5:3d:1b:
f0:45:28:da:a5:11:39:bf:d5:95:2c:1a:6b:7d:45:
87:5b:0e:55:9b:86:3d:c2:67:ae:d5:df:36:f8:b8:
8a:b4:5f:28:e0:a6:38:3d:07:82:73:f5:6c:56:68:
b1:20:b5:97:e2:cc:d6:e1:d4:fc:b4:2e:76:2e:06:
8f:82:74:e6:67:74:70:da:95:ac:26:64:47:eb:70:
ec:2b:6c:78:cb:89:ba:ee:d9:0c:40:26:24:da:b1:
7c:f8:8d:61:02:53:42:24:31:d2:c2:4e:d8:01:7a:
17:f6:9d:e3:ac:1b:77:eb:05:c8:7d:8f:35:a1:de:
e6:02:d9:34:62:b5:57:e1:71:00:b6:07:70:c3:b0:
f5:29:5f:4a:6f:b3:cd:c4:80:7d:2f:05:5b:c4:3b:
1f:17:54:e8:b8:12:19:d7:30:64:6c:8b:75:9c:47:
78:47:e6:9d:b5:b9:3a:86:43:fd:2d:e4:e0:18:8e:
09:79:0c:71:d0:98:6c:a8:dd:90:b1:9a:83:78:27:
6b:d0:93:5f:f6:24:1b:e7:f9:ba:53:77:ff:65:95:
9e:42:c0:5d:8a:4a:17:b6:3a:da:7a:26:fd:f2:5b:
99:9e:05:70:69:c3:ea:83:0e:f0:cb:4f:aa:08:6c:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:18:9A:AD:E4:4D:77:61:A9:D4:B9:DE:9A:3F:CD:52:2C:CB:67
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:af:e5:81:50:88:64:c8:ff:81:c9:1b:91:34:04:d6:42:79:
d2:46:0e:38:90:01:99:47:10:25:68:db:30:3f:71:40:b4:4b:
f1:5f:be:38:39:af:70:c5:6e:fc:6c:0d:9c:d7:c0:d0:26:fd:
4d:4b:d2:9a:6a:69:6a:86:a4:e3:33:a7:f7:ae:57:e3:0f:71:
ec:f9:7b:9b:f2:ac:e5:ae:5d:0d:88:b6:08:61:25:fd:e1:09:
69:c6:ee:61:ac:d5:fd:75:3c:f9:10:c9:86:6c:3e:2d:f7:93:
24:e9:3d:7a:c7:c5:0d:94:dd:f1:86:36:bc:dc:25:68:2d:72:
e3:7f:4c:c9:08:1d:55:06:c6:91:9e:70:75:a7:9d:58:20:f5:
8d:1b:3f:e3:8a:01:5a:38:e9:07:c9:ed:f9:2b:c2:58:dd:a9:
c4:4a:eb:7e:6d:5f:fd:56:e4:28:46:15:05:be:51:ef:98:b6:
9c:1c:c4:5b:f4:6d:10:b1:4f:79:f3:b5:77:ac:07:fa:c1:39:
5e:91:2b:9c:47:42:d8:98:08:94:a9:c1:9b:c2:93:27:59:38:
7b:68:e2:bd:28:94:9b:8f:12:f1:39:f3:6b:3d:24:c4:1a:e5:
51:05:bf:51:82:6f:72:28:a7:45:59:41:6f:6f:f9:12:61:e0:
0b:70:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:22:07 2025 by rpki-client