Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: DvE0CM8iuNdy+b42s0qE38uzoPPD7pfaddnCXMHdd/o=
Subject key identifier: E8:7F:75:46:C6:9B:64:72:1A:97:92:B5:E4:C5:33:97:7C:12:D3:E0
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 0198481BF662EC8CEB768AAD2DCE68222864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 03F2
Signing time: Sat 26 Jul 2025 19:00:48 +0000
Manifest this update: Sat 26 Jul 2025 19:00:48 +0000
Manifest next update: Sun 27 Jul 2025 19:00:48 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: l0wwjWbyt4TW5anGjA7YAH06d/XqImHO7dnjvRur1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f6:62:ec:8c:eb:76:8a:ad:2d:ce:68:22:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Jul 26 19:00:48 2025 GMT
Not After : Jul 27 19:00:48 2025 GMT
Subject: CN=e87f7546c69b64721a9792b5e4c533977c12d3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:bf:16:ae:8a:3b:18:56:d4:31:2e:0c:6c:
c8:d5:7a:c2:5e:94:1a:92:da:40:69:06:5b:e1:6f:
96:d5:72:d0:13:79:4d:0e:de:b8:ca:0c:17:cf:37:
dd:cb:e6:d5:c0:7c:8f:95:b0:80:ff:20:2d:77:bf:
20:ad:e4:c0:19:24:98:e9:eb:71:2f:38:0d:7d:17:
74:94:1e:37:0f:ab:a2:71:22:04:f8:7d:8b:6b:87:
00:1b:e6:13:d2:73:fa:a1:09:26:df:5a:88:cd:fe:
fa:fd:95:0e:cf:17:d0:56:36:a8:5e:1f:65:e1:52:
4e:a7:27:cf:9b:63:15:4b:e6:70:8a:29:e8:77:93:
75:35:3e:18:51:01:78:8d:47:8b:a2:b2:9b:db:4c:
9c:93:23:1b:be:8a:ce:70:be:fa:3c:b3:da:1f:48:
5d:76:93:f0:69:5e:d6:60:a3:75:07:3e:e8:d5:58:
22:38:e4:6b:e4:0f:0e:73:bf:cc:4e:c7:0f:74:a6:
b8:9e:01:89:4c:c2:f2:5b:c5:b1:9d:1c:22:3c:b3:
cd:a5:2e:08:84:b5:a7:6d:30:18:8d:81:4b:67:a8:
ff:2a:85:4f:c3:f4:dc:4c:4a:11:93:b9:39:94:1c:
c2:fb:9f:c6:9c:7d:1d:04:87:b4:c5:2d:77:0b:04:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:75:46:C6:9B:64:72:1A:97:92:B5:E4:C5:33:97:7C:12:D3:E0
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:57:2c:6f:b7:ff:12:56:f0:4c:77:97:2c:dc:5a:db:3f:
88:b8:68:05:75:e6:ea:70:e4:71:a0:0e:ce:60:25:d8:fe:db:
10:c2:08:36:10:6c:1d:02:77:23:a3:85:86:54:98:28:3e:7b:
25:dd:cd:7e:af:9a:b2:98:47:04:99:8a:90:01:48:74:1f:ce:
35:a6:21:98:b3:e6:ed:7b:b2:20:24:11:69:fd:d7:d2:28:de:
31:29:9c:82:be:87:54:0f:a5:fb:9c:80:9d:76:1c:da:29:75:
db:5b:75:94:85:8c:42:45:a9:6a:22:40:b9:a9:50:dd:53:e3:
7b:06:f6:22:56:ef:cc:0b:87:26:13:76:cc:5c:ea:02:ac:bf:
f3:fa:ae:e8:11:e6:f8:10:26:f6:fd:40:d0:69:95:3d:43:42:
36:ff:be:3b:8d:0a:cd:25:6f:bf:90:0d:6c:e7:b0:f1:7b:e7:
b5:8c:31:20:8d:a7:45:34:fe:0b:6c:90:5f:e9:45:e6:17:67:
ee:68:81:8b:6d:27:4f:9a:e0:f7:35:06:46:d0:03:c8:f7:05:
21:8e:2f:63:fe:cb:0e:f5:de:51:26:db:10:ab:d7:da:dd:c2:
5f:f5:45:37:c7:11:e8:4a:9f:bf:bd:40:97:2e:9e:90:4b:a9:
f9:76:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:50:30 2025 by rpki-client