Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: /QF7/qfwXDLyOSVVI9TxhdW9uFnzmH37TvgrGLwMNVI=
Subject key identifier: CE:90:97:33:84:25:CB:E8:E6:7F:56:A1:B9:38:80:9F:82:D6:3B:1B
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 019921B1AEDE8C7120446E66BB909F7A3AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 13D9
Signing time: Sun 07 Sep 2025 01:01:56 +0000
Manifest this update: Sun 07 Sep 2025 01:01:56 +0000
Manifest next update: Mon 08 Sep 2025 01:01:56 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: ExRlCMibF+lvqi6vvJsndp64miWcdQZfKNobO8oqDF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:ae:de:8c:71:20:44:6e:66:bb:90:9f:7a:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Sep 7 01:01:56 2025 GMT
Not After : Sep 8 01:01:56 2025 GMT
Subject: CN=ce9097338425cbe8e67f56a1b938809f82d63b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:1c:a8:0e:43:29:8e:09:14:d6:8c:96:85:
5d:a7:00:95:e8:50:06:be:13:57:65:a0:1f:56:1b:
71:c9:5c:45:bb:d9:75:1f:64:62:e6:03:3e:08:4f:
dd:9a:5e:bd:08:43:5e:55:e7:29:c3:67:f2:56:ed:
80:e4:8f:fd:2f:84:62:34:f5:b6:7d:0d:67:ca:aa:
6f:da:e6:d0:20:0e:36:5d:9d:f1:9c:c9:7e:3a:16:
e5:f3:3f:5e:0e:6c:f5:e9:58:5b:c6:44:7c:47:96:
28:12:8a:9f:a8:34:ad:2d:95:67:e7:b4:b4:0e:f7:
b5:e7:83:4d:bd:5b:a1:ff:e6:c1:e1:95:83:23:4e:
0f:bd:fe:2d:67:9e:ee:9f:18:1c:90:b4:70:bc:b1:
27:79:6c:e1:12:e5:08:01:e8:48:2b:47:3e:71:55:
ff:91:2a:28:71:88:d9:88:03:d0:30:51:23:ad:f8:
84:cb:5f:e4:2b:91:6a:b2:c4:bc:73:c5:82:e0:00:
17:d3:cb:dc:d6:39:aa:17:83:70:9e:b8:c8:fc:59:
a5:c0:b4:db:01:55:51:f3:b4:73:ea:6f:63:81:9a:
e0:ed:06:f5:10:88:63:9f:53:60:30:c8:19:6a:ec:
43:eb:af:6e:7a:81:f4:39:c1:aa:eb:49:fa:0b:93:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:97:33:84:25:CB:E8:E6:7F:56:A1:B9:38:80:9F:82:D6:3B:1B
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:ce:fd:7e:d3:5c:b2:ce:ea:50:c1:b0:90:e6:8d:3f:e3:
f4:f6:83:b5:2b:11:15:8b:4c:5c:fe:f2:dc:c7:d3:75:69:ca:
9b:bd:e5:56:69:47:3f:49:66:a8:b6:5d:e2:d7:9e:a1:37:95:
bb:bc:bb:5b:4d:fd:1b:0e:c1:9a:99:45:2f:41:8c:cf:bb:a4:
ea:7a:2f:73:d1:04:e5:a7:36:e5:d0:fe:c3:86:ce:f6:34:39:
04:f4:e6:4a:46:36:23:22:24:7c:d1:bf:a5:01:43:ee:30:42:
07:48:96:a1:36:7f:84:fc:ec:3b:c6:b9:2f:ea:2e:47:06:31:
30:c3:4f:82:41:ff:93:5f:3d:30:01:ad:aa:80:00:fa:0d:e4:
d6:b3:39:71:da:d7:27:96:e4:72:b1:d0:e6:d5:28:54:10:92:
7c:99:03:d7:a3:23:c2:39:53:72:e2:ef:33:df:f8:1d:10:7c:
53:cc:4e:fb:43:65:3c:fa:1e:43:2c:b9:dc:e3:aa:6b:0c:67:
a8:61:8b:be:57:a3:2f:60:bd:b2:c8:01:cb:2a:84:84:b5:ef:
54:97:23:5a:db:57:52:fa:b8:99:57:0a:3c:08:31:93:6b:9a:
eb:14:f1:9b:c9:46:ff:e1:99:27:d0:00:f4:76:38:c8:2d:6d:
c9:7a:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:06 2025 by rpki-client