Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: su1teGdMGDGWUpCCDHxjZKuEfzVcFMfWaeQW7Hr7w2g=
Subject key identifier: 48:7E:18:F9:A1:D1:F0:FF:51:68:37:DD:EB:17:E0:E3:9F:1A:B0:43
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 019923D5975EAB12807F7DFED8DD17E51C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 04F4
Signing time: Sun 07 Sep 2025 11:00:24 +0000
Manifest this update: Sun 07 Sep 2025 11:00:24 +0000
Manifest next update: Mon 08 Sep 2025 11:00:24 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: P0FxaQCv8bcHBlbub6hReXh8qeR0NduYitOw56nLbsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:97:5e:ab:12:80:7f:7d:fe:d8:dd:17:e5:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Sep 7 11:00:24 2025 GMT
Not After : Sep 8 11:00:24 2025 GMT
Subject: CN=487e18f9a1d1f0ff516837ddeb17e0e39f1ab043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:74:5b:f2:82:20:b9:38:37:95:b6:1e:2b:
de:87:e2:98:f0:e7:3e:5b:b5:9b:57:35:d9:e2:ba:
08:34:26:67:a7:62:e0:89:c1:c0:57:0d:ce:61:35:
ba:f0:cc:0b:9f:1a:4e:c5:e5:b2:64:7f:d0:37:aa:
2a:8d:d2:ed:04:fd:af:95:41:07:ce:79:a9:19:ba:
ef:d6:e1:d1:bf:40:3a:f5:2f:76:e0:a4:0a:a3:6d:
54:99:9b:3d:a3:9f:8a:cb:65:55:d4:53:2c:1c:82:
b1:0b:1c:13:b2:ea:14:0e:46:d4:22:3b:b4:95:15:
21:db:88:dc:27:e5:26:f9:1e:1d:e9:13:9f:da:b2:
4d:5f:7d:ba:c7:19:54:d4:d2:82:23:57:14:41:a7:
3b:9b:4d:39:87:b5:0c:93:ff:bd:9c:5a:da:4f:90:
90:20:71:7c:dc:4f:36:35:6f:3f:85:c7:ac:d2:99:
db:c1:fd:6c:b7:0b:fd:dd:1f:77:90:79:3a:0f:81:
87:76:03:66:c9:4e:52:d4:37:64:fd:94:7c:a0:d0:
c7:7f:4d:77:19:0c:29:c2:0d:25:56:33:04:80:09:
a0:42:52:67:1a:5c:9d:51:0b:18:08:c7:8d:40:82:
ca:a0:58:62:f7:00:3e:b8:94:6a:ec:48:3e:19:35:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7E:18:F9:A1:D1:F0:FF:51:68:37:DD:EB:17:E0:E3:9F:1A:B0:43
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:60:46:72:f8:11:e3:9a:99:46:7d:7f:48:5e:d1:6b:12:
58:1b:f6:b5:5f:a6:44:4f:ca:9d:84:5e:5c:84:59:56:eb:5f:
69:7c:2e:44:d5:c8:34:59:e2:66:68:8c:ac:82:86:7f:31:40:
46:c9:a8:82:79:da:c6:d6:ff:c9:49:c9:1e:73:ae:c1:d7:d5:
0f:c1:a3:7a:39:75:c5:f0:e4:92:af:e4:3d:7c:fd:e6:2b:1e:
c6:64:aa:6f:91:26:02:db:8b:e7:40:1b:12:ed:1d:3f:fd:62:
39:b8:82:23:ca:d3:c4:eb:e0:b9:f6:75:eb:a4:ae:e6:f4:f1:
80:e1:d3:bc:e8:38:4f:d6:1b:16:51:d6:d6:fe:75:42:d4:74:
e5:30:87:3a:ea:da:41:a5:61:0d:6a:aa:e7:ad:e4:01:6c:e1:
48:01:78:60:68:0e:25:d9:54:c0:d1:33:23:85:84:85:60:2b:
29:a6:28:af:6a:82:53:15:ca:8e:19:8a:05:40:bf:87:71:aa:
34:f8:d1:ab:b2:bd:0b:a6:8d:30:8c:dc:2b:05:c8:21:9b:81:
16:87:0e:52:fa:4d:42:8e:ec:06:7d:ec:8a:ec:fc:4c:f3:61:
48:83:a4:48:5a:0e:2f:37:af:9a:52:df:50:f8:64:f9:b9:8e:
4b:89:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:13 2025 by rpki-client