Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: ErzqsbS2IX8Jfy4YKN9yeEduqCRijsmnuJlI3VCGtO0=
Subject key identifier: 12:DE:1F:F6:4F:D4:30:7C:72:F0:6E:D4:FD:2A:D5:07:C3:B6:B2:02
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 01984966992AD2CED023544DBB0DF34A3602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: NQQKnAy1l2uzCxo/2wY6z4MrUpZL5dTv/yc7W3epsQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:99:2a:d2:ce:d0:23:54:4d:bb:0d:f3:4a:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=12de1ff64fd4307c72f06ed4fd2ad507c3b6b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:7b:3e:ca:2f:ec:37:9f:8a:4d:69:6a:a6:
2f:91:3a:65:cb:f0:df:49:70:0a:84:fd:f1:cb:b9:
f7:a3:03:6f:7a:94:53:75:77:3e:e9:30:d2:33:63:
bf:03:09:19:bb:71:23:a6:97:18:d8:d3:cd:91:94:
88:e4:41:9c:9e:6a:f8:61:6a:f0:47:f5:eb:c9:71:
dd:49:e6:f6:fa:9c:d8:3a:9f:72:0e:65:c8:0e:39:
ba:e8:d0:51:c3:eb:29:59:78:d5:28:d8:34:89:53:
5d:14:9c:63:c0:07:64:c8:b1:b9:65:fd:76:22:73:
52:a5:1e:7e:05:38:37:03:54:39:aa:fd:c7:63:60:
ca:2c:1c:9f:33:bf:c0:11:8a:11:ed:fe:bb:d6:c8:
f1:06:ac:71:5d:cc:0d:93:27:2c:02:05:40:bc:fe:
e0:b2:4e:c3:36:f7:01:79:5c:f7:ee:62:57:8a:08:
38:05:92:5c:9c:7d:ea:fe:a6:e5:df:a2:67:fc:01:
ea:33:06:a2:67:f6:1c:9a:5c:e8:02:27:27:7b:84:
25:b2:f7:2b:37:57:ea:d2:dd:58:97:56:bd:92:d9:
a7:4c:91:98:da:98:76:cb:a0:4d:46:9a:e2:ef:ba:
5b:5a:0f:8e:8f:d2:3f:9a:ee:cc:88:3f:d6:78:b1:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:1F:F6:4F:D4:30:7C:72:F0:6E:D4:FD:2A:D5:07:C3:B6:B2:02
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:79:15:2e:71:c3:73:3c:f8:92:4c:1e:a7:b1:79:be:ea:6d:
8f:1b:6e:3c:98:6e:42:36:b5:00:bc:25:9e:1b:ae:6e:07:f5:
03:f0:7e:dc:28:88:4a:89:3d:83:c0:02:85:e8:69:dd:ca:13:
60:90:53:55:b6:10:87:7e:ba:46:99:49:33:e9:92:08:0b:2b:
01:d1:f2:ec:d1:99:62:51:85:32:f3:cc:66:9f:90:6b:4a:b4:
1b:49:c2:4f:b5:51:6f:d6:77:35:3c:3e:72:9b:d7:56:f7:44:
9c:f4:28:ee:f1:db:8c:b4:f9:29:56:1a:16:f0:82:92:ca:2e:
b9:3e:59:d9:3c:4a:b6:de:e1:9f:57:f2:19:bb:df:89:66:41:
b8:ee:3a:dc:c4:87:4b:c3:c4:2f:1d:23:53:f2:d7:86:4a:f3:
26:6f:3e:4b:6d:d3:8a:ff:1a:f2:e5:5b:98:0a:69:ba:82:0c:
1f:07:59:eb:54:eb:6a:19:10:00:47:fc:e0:49:fc:69:1d:f2:
09:28:e9:4d:a2:b5:06:3f:05:e2:29:58:6c:e3:c9:ce:bc:09:
61:73:22:1a:51:fd:53:fe:2a:69:03:c1:15:13:73:9a:64:04:
d0:1f:eb:b0:9c:ae:4c:f4:97:b3:f3:f6:99:e4:9c:ac:91:af:
a2:68:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:09 2025 by rpki-client