Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: AVrDBnCZHKk0rqjw4YZ8TsLxfLC22iEnhabDJZEYelw=
Subject key identifier: 74:3B:88:FA:62:64:3F:28:4A:1E:63:8F:92:41:6F:CD:96:9A:0F:F3
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 01992255CE707FA2BCBBC4A2EC909BC1A878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 0536
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: VhbIUiL9675Rl/hXxHlLIAWjTn/QuiX13J0F5qnJj44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ce:70:7f:a2:bc:bb:c4:a2:ec:90:9b:c1:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=743b88fa62643f284a1e638f92416fcd969a0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:18:dc:e7:58:f0:23:e3:1c:35:55:69:43:
34:60:a3:ed:ca:51:5b:aa:29:77:1c:02:d9:0e:5d:
29:0e:bf:69:81:92:69:66:9b:2d:bb:04:86:1c:d4:
b3:47:24:ca:22:e4:81:5d:23:72:7c:41:99:10:89:
38:68:2f:81:3e:55:28:f1:5a:f1:02:e0:88:3a:4f:
54:85:48:c4:d5:29:4b:88:2f:28:cb:ef:d9:69:41:
98:6f:6a:07:67:b7:3e:ff:6d:47:2c:0d:44:59:49:
8b:23:b9:20:a1:60:a7:57:c0:53:83:c8:5b:26:76:
54:0a:5d:9f:e2:5c:19:0c:32:82:ef:01:b8:d9:0c:
5d:68:12:0b:35:33:02:6b:33:2a:f7:74:78:df:ec:
98:c9:b9:f9:de:0a:8f:da:d9:eb:0b:6c:ab:4a:9d:
bf:9a:60:c2:15:40:57:db:3f:8e:c3:b1:91:d7:70:
ce:6a:93:15:bd:f1:18:b2:98:f7:0f:7a:21:cd:5e:
11:08:13:ce:56:20:d5:f4:21:26:19:8f:aa:d0:3b:
d5:f5:30:08:c4:95:56:82:3f:7a:01:5f:f7:d9:7b:
6e:b7:79:e0:19:e1:2d:aa:c0:c6:52:53:5f:a7:d0:
e8:fc:dc:f7:f5:9d:ec:64:b9:35:4e:9b:c4:8c:f6:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:88:FA:62:64:3F:28:4A:1E:63:8F:92:41:6F:CD:96:9A:0F:F3
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:44:f5:af:27:c9:4b:91:c8:00:58:cd:45:21:fd:4e:3f:f7:
5c:2d:e3:0a:61:b7:32:cb:e4:77:10:8c:40:2f:6f:67:27:35:
73:72:39:5a:a5:27:4e:75:9a:5d:12:0e:70:c4:51:a3:44:84:
19:1f:89:74:52:b8:ea:12:d8:9f:f3:3b:89:45:5e:93:92:b2:
d7:bf:75:15:db:aa:3d:88:f4:85:02:0c:e2:aa:19:4d:21:cc:
df:3b:ab:c3:8f:4d:1d:1d:4d:60:d6:3d:15:aa:a4:85:a5:65:
aa:99:68:3a:32:5e:a9:bd:51:72:3c:f8:bc:19:3d:c1:76:41:
a8:3f:27:91:8c:d8:20:3d:4a:26:f3:c5:19:01:ac:d7:7d:95:
af:8f:f1:a9:49:ec:69:3f:59:73:b4:a8:39:b7:8b:ad:4b:90:
f7:25:ea:77:66:b6:f5:eb:f2:27:93:ee:66:88:e3:b8:26:dc:
25:ad:9e:82:fd:03:46:5a:e7:61:34:e7:9a:00:7d:1d:4c:4a:
c3:48:eb:bc:36:ff:d5:53:c4:6b:9e:9e:64:88:81:72:83:74:
49:a7:04:d8:81:43:b5:bb:fc:b8:78:32:f5:be:cd:13:10:08:
b0:7f:21:af:f9:a4:d0:6a:f1:65:e5:82:2b:f6:82:f3:29:03:
f0:3f:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:29 2025 by rpki-client