Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: 7j/bBIvBn+Ijp+Vq3kb2d3DNhOGe45Fs0R+3CTeY+80=
Subject key identifier: A7:DB:FD:EC:66:EE:F9:D1:08:34:C2:E0:9B:2D:4A:92:B0:E7:84:D0
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 019849D37C37E347C347B474FB002B8349A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0C7D
Signing time: Sun 27 Jul 2025 03:00:53 +0000
Manifest this update: Sun 27 Jul 2025 03:00:53 +0000
Manifest next update: Mon 28 Jul 2025 03:00:53 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: 96suVKXY9OUIfsOBtCJiR0udJW5EjIli08iHnRUEI8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7c:37:e3:47:c3:47:b4:74:fb:00:2b:83:49:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Jul 27 03:00:53 2025 GMT
Not After : Jul 28 03:00:53 2025 GMT
Subject: CN=a7dbfdec66eef9d10834c2e09b2d4a92b0e784d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:93:7b:ab:d6:30:50:e5:3f:c9:b8:53:dd:
92:b9:cb:6f:76:8e:eb:78:10:04:c1:2e:3a:fc:78:
14:01:f9:e1:dc:a2:52:23:23:f3:d9:ac:75:a6:08:
d4:09:46:78:ed:ae:05:dc:b0:65:65:0a:98:62:9e:
7a:24:78:f7:87:63:fa:04:db:b2:13:da:c7:d3:7a:
c8:d4:93:d6:5a:f5:e6:1e:88:3a:b3:a4:42:9c:da:
57:f4:e0:cd:79:64:9e:4e:a1:d9:60:13:43:2a:af:
bf:97:fd:4c:b6:22:b7:4a:42:d0:0e:3a:63:d4:1d:
ab:66:b8:1f:7c:ce:a5:3c:62:eb:e9:d8:fe:31:16:
59:3a:26:20:c7:63:13:fb:9f:06:28:e6:cb:6e:57:
fe:33:9a:98:49:b3:ee:b0:18:58:4e:5c:e7:1f:d3:
0a:49:77:b2:53:fd:f0:8d:7d:58:3d:26:af:13:02:
d1:38:85:97:15:59:9b:e3:fa:4f:a7:f0:15:d2:10:
33:6d:4b:f0:fd:da:0c:a8:75:39:80:42:e5:cf:8b:
21:7e:5a:4f:b4:e5:66:78:c6:36:b1:66:d6:ca:cf:
13:67:02:c0:6e:8e:e7:82:73:f7:2f:25:3a:8e:f2:
03:59:8c:2c:86:4f:de:9a:72:f4:e4:48:56:88:fd:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:FD:EC:66:EE:F9:D1:08:34:C2:E0:9B:2D:4A:92:B0:E7:84:D0
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2a:e6:3a:06:53:b4:14:40:59:ca:f0:94:02:5c:27:bb:fc:
ee:67:84:c4:71:19:bb:34:bf:ae:57:c2:ec:0f:a3:1d:0b:a0:
bc:d5:16:b2:f2:e9:10:b0:0a:33:cf:9b:7b:32:d8:c6:7c:3a:
b0:23:38:59:10:72:e3:65:5f:55:ee:3c:27:cb:b9:98:cf:b3:
24:61:43:d6:94:f4:a5:b9:76:3e:75:2b:65:53:9e:9b:95:dc:
e6:97:e2:c5:f3:32:9a:6f:ef:aa:b0:d3:1c:ed:2e:5e:bc:11:
a2:8b:c5:a4:a0:95:58:04:75:eb:cd:42:30:f5:54:ea:5d:85:
de:9f:2e:54:32:30:8f:98:59:a7:76:b5:46:4f:a0:e7:1b:2c:
31:08:d7:29:7e:07:fd:c5:fb:be:80:77:76:98:ee:d7:11:99:
29:0d:5d:bb:ba:6e:74:89:78:da:9c:b5:ec:e9:ff:58:0a:df:
40:56:a7:c0:f3:ac:2f:a7:d4:b9:73:79:b7:58:dd:83:8f:3a:
2e:ca:12:c1:4b:87:9c:4e:67:8a:7f:80:c4:55:db:08:ba:86:
97:50:8b:4f:12:99:69:98:14:99:87:d1:e2:9d:80:bf:1a:d0:
51:21:20:fe:7f:34:a8:ec:af:e4:28:ad:c7:cf:c4:19:7b:b2:
08:47:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:11 2025 by rpki-client