Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: IQ691l9X9/Db3qEl2hEOdiMth2LFUH9B8H5E2YUTZtY=
Subject key identifier: 9D:A6:9C:C9:DF:5A:1F:B8:33:86:19:AD:CA:AC:E7:47:6C:9F:8C:C6
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019921E7D92EC9C83A4D1AAA1FFC0BD910AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: eNpCfPXPhABNCoO8OcHO/e8qOBpQHODpLKfm94SUTZE=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d9:2e:c9:c8:3a:4d:1a:aa:1f:fc:0b:d9:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=9da69cc9df5a1fb8338619adcaace7476c9f8cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:6e:3e:bb:46:17:f8:9f:ea:50:e3:d2:ba:
d1:e4:cf:1f:d8:4c:7e:33:93:5d:93:2f:3d:05:63:
1e:55:03:2f:f8:df:2f:69:56:0e:78:d7:f7:8d:34:
48:1d:dd:ca:76:62:15:67:c1:2c:1f:1a:f3:73:69:
a9:9c:b6:e7:c8:56:75:84:8f:a8:c6:4b:42:63:78:
dd:33:d1:7f:30:a2:5a:44:c7:8c:50:a2:f7:0c:78:
2b:96:75:7a:28:67:ae:10:53:c3:1d:78:56:06:28:
5f:9f:44:af:d0:72:57:f1:8d:3a:8d:91:41:8b:5d:
96:e6:04:d7:a8:52:48:ff:99:9d:09:be:59:d3:75:
92:ab:bd:dd:39:96:bd:80:fd:0e:29:9a:b5:f1:6d:
a9:ae:88:b0:a3:03:7a:2c:65:63:c3:6c:dc:47:e7:
2d:c4:ca:a1:6c:d1:82:3a:a1:7d:d4:51:e4:12:14:
8c:5c:61:ac:17:52:dd:0d:e2:2b:4c:19:cb:ae:cd:
ee:d9:a1:63:1d:9e:9c:fb:c8:b1:52:33:bf:2f:3b:
45:1b:e9:72:d2:78:99:99:cc:46:51:f8:0a:b6:74:
fa:91:82:d8:80:a8:a3:b3:7c:36:b9:d4:2b:d2:2f:
6c:4f:d2:86:17:0f:4e:3d:ca:d5:09:e6:e6:da:0c:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:9C:C9:DF:5A:1F:B8:33:86:19:AD:CA:AC:E7:47:6C:9F:8C:C6
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:8a:00:22:2a:11:d9:75:54:9b:9f:a7:f5:6a:d9:a8:35:
47:7a:46:a0:cf:17:6e:ad:df:b9:16:dc:a7:07:ec:9c:c7:a9:
8d:ca:7d:ce:36:b0:c7:c6:8e:cd:66:44:cb:41:6c:61:92:2a:
f6:99:c8:ca:00:2d:bf:45:a0:12:35:a7:7f:ef:aa:c4:60:dd:
e7:7f:3a:47:42:ed:9c:ca:78:e9:67:56:96:7e:24:4e:81:46:
25:6f:b4:d2:bd:8a:41:70:5d:37:78:c6:77:52:36:47:1a:51:
d4:e9:22:42:08:6f:f3:12:4a:f6:31:b3:7f:e4:d8:86:4d:ff:
28:fc:b8:59:3b:28:cb:11:cb:ab:02:64:e1:5e:49:67:fd:ac:
56:3d:1d:68:87:24:7f:da:93:41:5c:27:d2:9f:88:d6:cb:df:
77:78:cc:f0:b8:e6:5f:51:eb:0d:7f:cf:d3:0a:be:d9:7c:01:
a4:b7:a8:54:d9:94:d4:01:aa:c5:ca:04:16:ef:bb:5f:6b:00:
d2:7a:34:b6:9a:e9:bb:c2:8f:c3:c8:94:45:7a:9d:c7:e1:cc:
5e:72:3d:40:bc:e5:af:7e:86:b4:70:0b:57:b6:a4:04:0b:86:
c3:74:3c:5b:77:06:4b:99:17:58:ca:f7:7a:3b:fd:3f:07:9c:
5a:a5:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:08 2025 by rpki-client