Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: YxOHd6Q0N9A0+YQGbbb9VZWBCmwV5JK+NW28A/S3h48=
Subject key identifier: 62:7C:8F:1D:FC:3A:E5:CE:D2:02:28:F7:4E:7B:9D:50:13:3A:87:8B
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 01984AAEEDB327F496283EF76DE0BF661199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 09BC
Signing time: Sun 27 Jul 2025 07:00:34 +0000
Manifest this update: Sun 27 Jul 2025 07:00:34 +0000
Manifest next update: Mon 28 Jul 2025 07:00:34 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: xgA9+h0nxOLyI2JPSQRmWLghdJGe3LaOYUdng5eywsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ed:b3:27:f4:96:28:3e:f7:6d:e0:bf:66:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Jul 27 07:00:34 2025 GMT
Not After : Jul 28 07:00:34 2025 GMT
Subject: CN=627c8f1dfc3ae5ced20228f74e7b9d50133a878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:7e:ac:3b:87:66:bc:8c:df:5e:2d:89:69:
82:4b:95:86:2c:be:ee:e9:02:53:c4:4b:a2:94:4d:
ff:71:b3:d8:76:0d:60:3c:eb:ec:77:00:1d:98:9c:
91:8a:54:f2:53:d7:5e:dc:66:c4:25:95:d8:6e:66:
64:18:b1:d3:e2:94:ee:54:2a:09:56:2e:de:d4:db:
0b:b9:44:57:9a:40:7a:bf:58:0b:14:76:64:17:93:
63:12:f7:53:f9:21:cb:a2:70:3a:16:3d:3b:a3:0c:
0f:c9:7b:4a:b8:75:ef:32:bf:45:0a:9b:3d:e8:9d:
3a:0b:74:3f:7c:33:66:ae:f1:31:e2:d5:72:b5:9c:
03:bb:77:9b:f3:0f:a5:21:82:fa:fe:09:dc:58:4e:
a3:1b:a1:c7:1a:e4:fe:fe:66:47:60:40:97:f3:d9:
d3:66:a6:29:64:21:83:de:cd:01:1b:0e:c4:da:c2:
28:b2:7d:03:36:02:18:8e:40:9c:c7:2c:89:23:36:
48:6f:ae:cd:a7:17:3e:e9:7f:a6:35:43:08:77:f7:
14:8c:12:f5:b1:9c:36:d9:a1:61:59:b6:54:38:90:
f7:d7:48:aa:c7:2d:26:b6:98:19:db:ba:16:1c:fa:
28:3e:ec:6d:86:bb:f6:39:f4:e2:23:61:aa:57:f7:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:8F:1D:FC:3A:E5:CE:D2:02:28:F7:4E:7B:9D:50:13:3A:87:8B
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:7a:3c:18:bd:34:49:ba:3c:66:26:5f:61:66:aa:1b:78:
8e:23:2e:ac:bf:4b:9a:5c:9f:0e:9f:32:79:f2:f5:d8:81:51:
c0:a3:d6:14:30:6a:20:0c:21:4c:c5:f7:34:4f:0f:5c:19:5f:
5f:5b:ab:05:2d:df:77:e0:dd:01:d7:1a:9d:35:68:ca:ca:2d:
6f:1f:6e:c9:1f:95:3e:1b:cf:c7:8b:4e:35:d4:7c:f2:3f:39:
ae:ae:87:ab:74:53:87:c4:e2:cb:65:04:76:2b:24:07:35:ee:
55:20:6c:91:b6:c5:7a:11:70:64:4e:3d:a9:78:80:33:86:fa:
fe:1e:ad:8e:88:bb:c5:5a:08:d1:40:a5:fb:35:32:83:cc:a6:
18:b8:65:b1:a3:b8:8e:ab:4e:89:71:c3:4a:ce:57:7b:e4:fa:
28:ca:b5:92:22:f1:e7:4b:39:9e:d6:8e:4f:65:dd:26:e3:6c:
72:9a:6f:9c:21:1e:63:a9:fd:3a:ca:e7:f0:22:05:45:18:48:
ab:a3:f6:a7:ab:7c:ca:09:9f:0e:c0:7e:b4:08:6a:4e:0f:74:
32:d1:ba:82:eb:c3:22:bc:bd:92:14:1f:72:b1:d8:14:66:d3:
7c:fb:f5:bc:94:f1:ec:8d:c1:48:32:39:74:7d:37:b1:96:2f:
69:fc:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:11:13 2025 by rpki-client