Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: 0vZVbY6a0mXHy+b59yGLRt/yn43cK73yh5pihggArTo=
Subject key identifier: AE:2D:0C:7B:B6:53:00:1C:AF:AA:EB:94:7B:C8:0C:B1:00:5A:36:DE
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 01975A24B76A50FB8F294CA66EFB81BE641B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0C18
Signing time: Tue 10 Jun 2025 14:00:44 +0000
Manifest this update: Tue 10 Jun 2025 14:00:44 +0000
Manifest next update: Wed 11 Jun 2025 14:00:44 +0000
Files and hashes: 1: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: BZURiReI4l+l3qsXiCxq3ARR2wSiSvcvW2sqc32JBOw=)
2: Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa (hash: iHt82QR12LPpEvZ7uiS/6X3yVLGKHgczSuxvhMOvlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:b7:6a:50:fb:8f:29:4c:a6:6e:fb:81:be:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Jun 10 14:00:44 2025 GMT
Not After : Jun 11 14:00:44 2025 GMT
Subject: CN=ae2d0c7bb653001cafaaeb947bc80cb1005a36de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:65:2b:89:73:15:38:3b:3c:3a:0b:cb:d1:
1f:2d:0f:bb:93:51:14:1e:93:a4:14:33:5e:cc:b6:
ce:ae:31:7f:91:bd:f6:1f:9a:4c:d0:2c:10:01:3b:
ff:7b:95:9d:13:9a:5f:75:a5:ac:d7:46:3e:26:5b:
f0:c4:25:27:0e:54:a7:a1:89:ed:f7:e6:fb:3c:30:
fc:c0:d7:40:01:64:07:a3:7d:25:e2:30:1b:af:2a:
38:e3:f1:d6:b9:df:08:f8:f1:a1:1f:2a:b0:17:83:
07:71:d1:f7:bb:8f:7c:84:c1:e2:bd:8d:ea:19:ef:
23:55:16:26:e8:48:ff:b2:0e:90:e9:48:7d:32:46:
a5:99:dd:23:ff:e1:88:33:47:b1:bb:8e:d7:e4:67:
9b:28:9a:c4:1c:b8:49:1b:9b:59:4d:b5:6d:e5:d4:
68:6a:43:82:79:ce:fb:5e:ca:ca:1f:4c:be:c8:2b:
e3:6c:d9:6c:f6:12:87:74:d1:dd:e2:cd:03:aa:03:
5c:75:de:22:cd:f9:ea:d8:3c:b6:a7:df:f3:8f:a6:
c9:0b:93:3f:6e:f0:03:66:9f:48:b1:8a:2e:84:1f:
ed:97:b3:10:cf:d4:70:1b:9c:b8:a6:85:d4:d3:9a:
ad:a1:ba:e3:7b:cb:2e:ed:6f:b3:1c:f2:e8:bd:86:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:0C:7B:B6:53:00:1C:AF:AA:EB:94:7B:C8:0C:B1:00:5A:36:DE
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:1d:a5:f7:72:70:da:40:bd:5d:3c:a5:e3:80:f3:af:af:4d:
69:c5:36:78:72:7f:68:c9:fb:a1:f2:3e:d9:b8:6e:8d:d1:a7:
30:db:9d:74:17:08:5e:3d:8e:b7:c3:6a:65:cb:87:38:3d:75:
f6:fe:87:17:e8:40:f3:15:07:a9:5e:fa:3b:be:05:1e:57:c8:
34:48:c2:d8:80:0a:5b:92:47:d9:bb:4a:7a:ea:fd:d9:72:04:
d8:f5:46:0c:a1:ff:87:e6:a2:cb:85:9a:9a:f0:e7:28:07:93:
7a:15:1b:98:20:26:cc:ec:15:cc:4a:d1:23:8d:01:9c:da:d5:
40:82:52:a6:3d:e9:64:90:0b:db:a2:e0:79:15:67:be:50:ed:
1e:44:7f:8e:b8:d4:12:6e:f6:5e:01:c9:79:5d:d7:5c:7a:ee:
af:25:02:58:26:a5:5c:58:70:97:73:7d:0d:ac:ca:44:a9:57:
58:c9:66:29:46:e4:e5:32:9e:ce:9e:8a:5c:8c:75:54:87:64:
85:3d:64:cf:df:86:46:41:3d:c8:92:7d:09:b7:3d:1d:bb:47:
d3:fd:13:73:70:8e:14:26:9b:67:d3:b9:ca:e8:f8:51:84:ee:
dd:09:5a:9d:86:68:56:b8:ba:72:6e:75:74:30:28:67:fb:7e:
e1:68:17:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:37:27 2025 by rpki-client