Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier: 62XQ8An+IlxLiKiguAIeTsUP9zc4VzdM7DzJV5swWrQ=
Subject key identifier: F9:62:17:18:2B:B3:C0:47:EB:85:13:22:7A:34:CB:98:96:0E:2B:BE
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial: 019921B19FAA42D6197140BBDA59BDFA5835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number: 08A6
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: j63M88UTPlHeReSaDtpgn7knbG5kXg8ve1kUVgozsBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9f:aa:42:d6:19:71:40:bb:da:59:bd:fa:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=f96217182bb3c047eb8513227a34cb98960e2bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:97:52:f7:41:5b:a9:f8:31:b0:9d:cc:c8:
c4:5d:c1:a7:1d:97:18:90:97:d8:7e:21:4e:98:f4:
a9:52:18:7a:e1:e8:d7:86:1c:86:d5:bf:9a:46:f3:
ef:c2:ba:1c:ec:7f:ea:06:a5:72:01:f1:90:66:56:
20:21:be:c1:3e:5a:53:89:ae:55:0b:0e:9a:b1:ee:
03:c1:1c:e5:88:ba:30:5c:53:4b:42:d5:71:4e:e7:
31:f6:85:06:14:35:2f:4d:4a:33:64:f5:1d:cc:65:
ae:34:b7:42:05:8f:dd:5f:41:b3:0b:af:53:3a:1c:
19:8c:5e:1f:c4:d7:34:3e:8b:4c:36:7e:7c:b4:c1:
d7:dd:be:e2:89:8b:7d:d2:77:a9:14:6c:df:8b:ac:
8c:40:ba:f6:f5:1a:ca:62:c8:16:81:77:88:57:9d:
a1:22:9f:95:1a:bf:31:22:e4:a5:85:81:fa:0c:c0:
c9:7a:45:a6:cc:5e:1e:76:04:6c:60:e9:c7:7d:c0:
13:03:49:24:f3:33:04:d4:e7:ac:c1:ed:29:ea:48:
7c:b2:a0:c7:2f:5f:1d:4b:43:87:91:c7:bf:5f:97:
20:d8:e5:01:72:01:e6:23:30:6b:86:64:f3:e7:98:
58:80:43:26:e5:7c:4c:96:a4:5b:ee:77:1a:a8:11:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:17:18:2B:B3:C0:47:EB:85:13:22:7A:34:CB:98:96:0E:2B:BE
X509v3 Authority Key Identifier:
keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:d9:96:ef:14:a0:1f:5a:ac:8a:06:62:82:4d:3e:1e:4a:
fa:09:77:49:35:76:44:ec:32:7e:f3:6a:43:68:41:e5:d6:f6:
f5:79:be:ef:63:e4:4d:f6:b1:c5:19:eb:ed:9e:44:bc:14:f1:
dc:16:6d:79:2b:23:41:ef:d3:24:b4:b3:f2:ab:14:01:19:26:
44:bd:30:97:45:c6:dc:f1:50:9e:63:fb:f5:d2:58:52:5e:28:
6b:67:48:c1:4e:ee:ae:5e:9f:90:fd:8b:be:df:97:40:26:b7:
2c:28:d1:05:57:b4:b5:56:e9:bd:6a:ea:df:1d:5d:78:5e:83:
1b:59:d4:92:f3:a9:07:e6:7e:fc:f5:3f:3a:c0:7c:7c:76:36:
7d:ee:12:e1:76:20:8b:c2:f2:b8:fe:ec:54:2a:6b:f9:7e:c9:
c1:a7:0c:d6:57:ed:4b:28:fc:c7:b8:28:92:fc:6c:d1:42:67:
51:47:0c:cb:2a:86:96:c9:93:97:0f:d6:df:e6:5b:f3:53:c4:
d0:4b:55:d6:13:0f:c6:07:77:2b:f1:c6:fa:fb:5e:86:99:e4:
25:9e:8b:0b:fa:d9:ba:c0:62:5d:cf:a6:64:d6:a2:89:b9:6a:
e7:e0:c3:cb:7a:0d:6b:8c:cd:4b:dc:d2:ed:54:df:45:77:f7:
f4:e1:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:18 2025 by rpki-client