Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: VoJKtV27t6Manhf0zR2Fk+ePM/EBGvflCuq0U/y9sfk=
Subject key identifier: 53:7F:95:37:D7:2B:7B:08:C4:18:C7:CB:FF:D5:57:CF:7A:EF:67:80
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 0199228CAC087E46DA8F7E3FBED08A5EB93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: EE
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: xRNd1ZZ77R4CyyT2xxS9QfbAjPZqdVaZ6/ITffa9s3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ac:08:7e:46:da:8f:7e:3f:be:d0:8a:5e:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=537f9537d72b7b08c418c7cbffd557cf7aef6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:cb:f4:d3:c7:9c:1c:54:59:a0:39:1d:88:
97:7b:55:25:6c:0e:75:af:c7:89:3d:32:41:b7:9b:
af:e0:0e:4b:2d:e3:11:42:fb:91:fe:3e:dc:55:f6:
a3:56:9b:bb:54:ef:63:c6:b0:3d:5b:88:83:d3:25:
52:eb:e2:66:0d:1b:49:46:a4:f7:b1:d1:00:82:2c:
96:d5:e8:1d:5f:9b:4c:a6:b2:34:14:71:51:3f:b4:
26:7f:da:bf:19:4d:d4:9d:b9:01:a9:47:cb:e5:e8:
4f:e8:73:cd:58:b4:b8:f0:a1:1a:3b:b3:88:7a:e7:
e1:58:79:f1:03:5a:13:96:0f:73:46:32:27:90:de:
b9:bb:2d:aa:4e:de:d5:75:da:ce:d9:b8:02:a9:7f:
72:3b:79:55:10:f4:9e:0a:1a:c7:21:f5:b6:b6:3c:
09:c2:d1:fa:14:52:0f:ac:3b:29:4a:a7:66:52:8d:
4d:21:f4:9c:58:76:52:0c:bf:c2:eb:b8:24:fb:df:
f1:2d:86:1f:1e:02:50:7b:19:f0:35:51:18:bf:2c:
0f:3f:4b:d5:6c:b9:dc:22:27:ad:aa:1c:44:ac:67:
ef:de:11:d6:ec:46:5a:b9:cd:d9:40:30:0b:ae:ef:
e2:51:16:e6:8d:be:7c:a6:59:75:b4:2b:cc:ca:83:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:95:37:D7:2B:7B:08:C4:18:C7:CB:FF:D5:57:CF:7A:EF:67:80
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:36:0a:8e:f2:84:79:7a:0b:99:50:79:d1:d9:97:91:4a:
04:b4:d9:89:2e:c2:e8:fd:47:1c:c7:4d:2b:96:db:39:e5:de:
80:16:4b:30:ac:a0:8e:e3:6a:82:92:d7:3b:47:fc:ae:c8:49:
f7:e0:3e:69:2a:31:f4:4d:98:59:8c:f2:01:63:7c:9e:c0:0c:
de:cb:0f:02:2c:47:46:37:45:9a:fb:05:ac:33:2f:47:0f:cb:
31:47:c8:76:b5:e6:fb:d6:07:7f:4f:e0:2a:cf:c6:66:67:3a:
55:88:c7:b0:7a:89:53:fb:98:26:54:bf:d5:2f:0c:e5:b0:90:
4c:03:42:c1:25:e9:df:0c:bc:59:9c:57:1c:89:d8:68:4e:e1:
bc:2b:3b:de:bb:1c:fe:11:76:b6:b8:b4:6e:a7:7c:9f:82:78:
77:03:38:73:1d:c0:a2:0d:06:88:4f:85:11:c1:ae:bb:0e:bf:
7f:a5:87:ac:a3:5f:d6:f7:7c:2a:5f:fa:97:55:d9:fc:ae:96:
43:20:23:ea:79:05:19:80:d2:3a:5d:ab:3c:a9:e8:a7:fb:19:
44:cd:0d:79:32:7a:07:1c:8a:1d:c2:18:83:f2:eb:06:a0:e5:
63:78:6e:35:1c:b5:9e:23:e9:06:9a:27:f3:f4:c0:1b:d8:af:
e4:a0:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:07 2025 by rpki-client