Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: qAFtDlo7qBAP3r1QYFzRyUoK9rC4t8K5xRwY0OboxlI=
Subject key identifier: 11:5F:9A:2F:08:29:62:F8:DA:D0:24:A6:59:97:50:53:72:7D:E7:FC
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 0197D774ED421409DA2DFD551F65FC3F4556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0976
Signing time: Fri 04 Jul 2025 22:00:53 +0000
Manifest this update: Fri 04 Jul 2025 22:00:53 +0000
Manifest next update: Sat 05 Jul 2025 22:00:53 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: nb4mJo/TXBQlhitUjuiQAHVHAM1Y5aj6EkcEPnf5+To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:74:ed:42:14:09:da:2d:fd:55:1f:65:fc:3f:45:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Jul 4 22:00:53 2025 GMT
Not After : Jul 5 22:00:53 2025 GMT
Subject: CN=115f9a2f082962f8dad024a659975053727de7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:58:df:b8:ba:8a:6e:93:b8:d6:b7:b5:fb:
99:a7:5a:6e:07:71:e1:a0:e9:c0:e6:ed:c7:68:93:
55:96:d4:a3:ba:28:4f:0a:cc:75:34:b7:94:20:a7:
af:c3:85:63:92:70:41:36:17:e4:ca:dc:a6:7d:70:
10:34:d4:d2:b8:5d:14:f2:64:e4:49:1f:55:b8:cd:
5e:45:5e:4f:48:6f:4e:a3:00:68:34:69:03:d4:6c:
fd:49:ca:04:f8:f9:82:9e:47:39:d0:e9:ad:16:5c:
76:eb:a7:23:4a:3e:be:2c:f6:0a:c2:d1:94:dd:78:
64:5d:a0:ef:cf:ff:61:bc:44:a5:83:21:22:6b:58:
df:98:d4:05:af:d5:63:d9:cc:f1:78:d0:a3:6c:8c:
74:48:3f:4c:37:92:ed:32:ad:ce:95:75:fb:8a:ab:
96:fd:51:66:c7:c1:ae:e7:73:55:d3:55:9a:7d:06:
7a:70:e8:59:97:a8:0c:c2:1d:c3:95:d3:86:2b:b8:
9e:41:aa:4e:f8:ef:05:4f:aa:d9:25:e5:90:9e:e5:
b8:4c:eb:e2:e3:0f:e9:c6:46:9e:47:76:26:d7:0c:
ba:19:ec:5f:49:b0:5d:6d:39:b3:bf:6d:da:34:c2:
c8:76:e0:07:9b:69:bd:a4:e5:75:8c:08:90:7d:76:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:9A:2F:08:29:62:F8:DA:D0:24:A6:59:97:50:53:72:7D:E7:FC
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f1:3c:f8:63:50:78:ac:13:e4:4c:e8:03:f5:f9:5d:95:26:
a0:c7:27:c9:88:76:a0:b4:fd:31:ec:0a:12:24:af:70:b8:6d:
d5:51:7d:de:73:9f:29:25:2e:40:94:95:2f:a7:ce:4a:bd:8b:
e1:df:f4:c3:d0:f1:95:ac:1c:97:c4:57:f5:00:61:e6:d2:10:
c7:30:af:dc:d1:b1:77:00:1e:46:07:04:fe:14:68:11:94:a4:
2e:10:c7:db:e2:ea:d0:ef:81:08:42:94:61:4e:51:1a:29:69:
ee:0e:55:12:10:84:41:b2:09:6b:e4:c3:9a:46:c0:4a:d0:5b:
3e:b4:02:00:1c:c0:ea:ee:e8:93:bb:0c:d2:78:d8:85:8a:27:
56:81:84:91:e8:8f:9c:f2:56:02:69:e1:68:1f:4f:47:ed:2c:
e9:1b:70:ca:a7:2f:07:7e:d0:52:44:4c:5b:3c:27:30:21:29:
8b:23:12:26:c3:9c:d4:f1:70:d9:38:2a:9b:ba:a3:c5:5c:f4:
72:04:f9:46:55:6c:6b:d5:e3:6b:0c:dd:08:10:a0:73:48:11:
14:a9:c2:fc:f9:f4:b5:f0:af:1b:ae:07:0a:0f:df:e4:a0:6a:
f5:19:cb:9e:2c:a1:e9:34:e1:f8:d2:a7:fa:5f:08:43:df:8a:
b7:77:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:24:19 2025 by rpki-client