Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: xNwu2LOMN36bbRISt6YHt8HtcVexj9PxTvQ0ph4fpX8=
Subject key identifier: A9:95:ED:1B:0F:DC:F2:A9:06:FE:E3:14:B3:3D:EF:63:45:2D:9C:4E
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 019848C0A72548FF16D1202C09259B85A70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 06A1
Signing time: Sat 26 Jul 2025 22:00:41 +0000
Manifest this update: Sat 26 Jul 2025 22:00:41 +0000
Manifest next update: Sun 27 Jul 2025 22:00:41 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: vbZqRYWAMzaSKDXWuiTKe3hVy0b13oHeyK8JBtOyD5Q=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:a7:25:48:ff:16:d1:20:2c:09:25:9b:85:a7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Jul 26 22:00:41 2025 GMT
Not After : Jul 27 22:00:41 2025 GMT
Subject: CN=a995ed1b0fdcf2a906fee314b33def63452d9c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:74:45:60:ad:65:65:55:fb:86:7d:25:27:
eb:cb:ac:8c:f0:e5:8c:35:43:51:a1:c8:72:78:02:
29:78:84:5e:71:f3:30:b1:a1:13:40:67:5e:9f:53:
07:71:26:f0:a6:5d:e2:5b:d8:15:55:7d:bd:2b:bc:
9a:ee:5d:0e:71:fb:7b:4f:72:33:6a:15:5f:72:4b:
ee:a5:93:90:22:26:72:9f:ae:62:c5:06:71:24:9c:
b6:5b:1c:36:34:a9:0a:b6:e9:ce:c8:61:9f:99:43:
a7:e4:9f:48:ef:2f:77:64:7a:3f:f6:f9:4c:9b:ad:
dc:b7:52:d8:f5:07:be:35:3d:4c:bf:1c:49:69:48:
a3:88:c5:4b:34:01:0a:78:62:7a:88:c7:12:b4:27:
19:93:8c:8c:9a:09:fc:6a:35:61:27:92:76:7b:b3:
0f:88:50:ca:34:ca:62:e9:f6:bc:6f:d1:89:4a:48:
ee:b1:92:8f:1f:d2:6f:8e:48:58:80:32:7a:43:56:
6a:67:af:88:db:54:3b:eb:dc:12:4d:d7:84:2c:e3:
51:b1:c2:5e:d5:75:82:91:97:68:3e:12:a4:a4:05:
88:2b:6f:3e:84:76:f8:ee:21:8c:1a:31:2d:d9:af:
4a:ab:4a:49:60:ab:40:0f:20:c1:b2:b9:fb:d4:90:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:ED:1B:0F:DC:F2:A9:06:FE:E3:14:B3:3D:EF:63:45:2D:9C:4E
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:87:01:b0:ed:a2:26:4f:46:25:83:e7:e2:16:2e:69:a8:dd:
25:44:c5:f1:2f:e5:7c:7d:2f:a0:94:40:0f:81:4d:09:26:94:
6b:d1:2b:15:dd:1d:16:61:ef:a5:47:ac:06:d2:8c:09:39:7c:
69:68:66:df:52:17:11:e9:f8:e0:47:5f:a2:bd:16:d0:ff:b2:
db:91:36:69:b2:06:85:6a:f4:06:fb:46:89:06:ed:52:48:57:
f5:d5:b4:78:35:03:08:48:4b:55:91:97:d0:e0:39:0b:9d:7e:
c3:bb:df:be:59:b4:af:d9:79:62:fd:d2:14:5a:08:66:24:ca:
f7:68:bf:db:6d:19:ed:f6:07:72:d3:db:f8:33:b8:c8:7c:9b:
97:af:2f:e7:2f:af:80:2a:f6:c6:99:a8:a7:af:91:49:f4:fe:
c7:78:f1:a6:2b:1e:2b:a8:c9:73:c6:34:d5:9f:0c:bc:30:dc:
16:1b:e4:c6:ac:86:d8:a8:46:08:15:e9:bd:3b:ac:ca:f2:d4:
16:6a:5e:ac:e9:9f:c2:90:31:9e:6d:b2:db:d7:16:a8:fe:c3:
cf:89:56:40:b7:35:2b:f2:92:4c:5a:09:08:c3:83:9e:29:80:
fb:dc:93:f6:8f:74:f6:c4:28:da:8a:44:9c:1a:aa:45:84:e9:
1b:c5:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:23:17 2025 by rpki-client