Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: BC4v0Vvlb8z8pYNcXsQ632QkeXs+xvmM0eqxSu0EnwQ=
Subject key identifier: 61:2A:EF:FB:65:84:0E:02:1A:4F:AE:38:07:BB:50:55:EA:79:C9:B6
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 019922C34C969A2EC0328870C91CB5BEA4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 02B2
Signing time: Sun 07 Sep 2025 06:00:48 +0000
Manifest this update: Sun 07 Sep 2025 06:00:48 +0000
Manifest next update: Mon 08 Sep 2025 06:00:48 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: Tem1tmyPFlDG7LWe8dAu5+/jzkQ4Pyer/xhaxHo9B6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4c:96:9a:2e:c0:32:88:70:c9:1c:b5:be:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Sep 7 06:00:48 2025 GMT
Not After : Sep 8 06:00:48 2025 GMT
Subject: CN=612aeffb65840e021a4fae3807bb5055ea79c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:c1:22:8d:35:fb:bd:f9:d2:f8:bc:39:d2:
79:07:40:62:0e:40:ac:a3:d7:8f:55:e4:a4:93:6c:
a9:da:b5:30:cf:91:12:c6:8c:d7:27:34:34:7c:ca:
e8:49:23:16:e3:ec:b6:a6:45:27:33:a4:87:5c:4a:
dd:79:c5:8d:49:c7:26:f3:b1:a7:3d:17:ab:78:ca:
52:fb:88:32:1c:09:a1:ec:ae:10:64:e9:24:0d:50:
2a:d4:cd:8e:6c:d4:b8:05:ce:75:c4:3d:76:a4:79:
96:d5:99:83:e7:35:e0:4e:6d:83:6c:cd:8a:e7:55:
90:33:ed:6c:59:60:87:0c:c2:2f:2f:70:2a:80:83:
83:c9:81:e9:bf:f8:a0:c2:c6:8b:c7:e9:fa:38:7c:
a8:36:9d:fe:c6:b0:4e:4f:a4:fd:55:54:1c:cf:ba:
fd:08:72:51:ec:55:a7:28:a2:99:ce:08:4d:60:8f:
e3:56:b4:4a:11:ba:77:50:0b:88:4c:ca:41:ba:8f:
b7:c0:44:75:f1:81:22:4c:bb:3e:cc:d2:0f:38:af:
56:39:78:13:97:39:10:ba:b3:04:2c:58:91:ba:da:
c0:12:a0:fb:bd:1d:21:33:5a:d8:b8:b6:26:c3:b7:
9a:f5:23:b1:73:e5:57:c5:37:c4:c4:78:8f:b0:0d:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:EF:FB:65:84:0E:02:1A:4F:AE:38:07:BB:50:55:EA:79:C9:B6
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:7b:60:5e:2f:e9:ee:e3:1d:78:fa:79:33:da:0f:c5:8b:
50:d9:70:11:36:7f:a5:ec:03:5c:e9:cb:96:dd:30:98:7e:86:
7b:99:bb:77:49:aa:59:b5:b0:a9:f4:d7:23:61:0a:2a:41:84:
b1:58:2c:70:be:fd:c8:7c:a0:0e:8f:2e:a1:4f:e3:f0:6f:9b:
9b:9c:71:3d:f2:10:45:6e:bd:17:25:79:df:ee:88:c2:5d:63:
1c:83:67:23:96:0c:ce:ce:63:e9:c1:41:34:a7:33:d5:14:d4:
fa:74:b2:c9:8f:95:bb:59:78:ea:1e:7d:97:29:61:14:71:8a:
b5:c5:11:52:86:f3:63:96:16:63:09:5f:c8:45:e7:47:15:18:
9a:96:ad:8c:40:7d:b8:b3:ee:8e:bc:b5:3b:37:70:64:c0:1b:
f5:8c:0f:b2:4a:12:cc:13:f2:eb:5a:65:c7:e9:01:5d:2d:b5:
8f:f7:2f:9b:a2:ab:48:64:9f:df:e9:86:98:3a:28:e1:97:8d:
53:6f:d4:fd:a1:c1:d1:35:b3:02:91:ea:9f:a6:09:7d:7b:91:
22:bc:d9:00:8d:e0:82:5a:e7:19:6e:43:5c:fb:cc:69:fd:22:
41:4e:98:eb:7b:4e:2a:e7:ce:18:ce:f6:55:9a:78:86:d1:0e:
c6:a0:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:48 2025 by rpki-client