Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: EfWyEuRsxrXDenDkNzHRUAh77wFn6pxsJ+5wVQ6x4k8=
Subject key identifier: 13:65:B4:03:EB:7D:72:4D:F6:F3:39:27:7A:DF:63:4E:8B:74:28:7B
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 019921E763C68515954D83E8B7A18CA57C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 03F1
Signing time: Sun 07 Sep 2025 02:00:36 +0000
Manifest this update: Sun 07 Sep 2025 02:00:36 +0000
Manifest next update: Mon 08 Sep 2025 02:00:36 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: 4O03eS6PBH3ZHwYZnt5onJIClrLbduGNFfwRowQ2seU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:63:c6:85:15:95:4d:83:e8:b7:a1:8c:a5:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Sep 7 02:00:36 2025 GMT
Not After : Sep 8 02:00:36 2025 GMT
Subject: CN=1365b403eb7d724df6f339277adf634e8b74287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:02:a1:24:38:e1:52:fb:42:f0:c1:32:1f:
55:87:32:47:8d:98:c4:58:96:a8:a6:78:28:49:da:
7c:d6:96:1c:40:df:a9:ac:2e:15:53:b1:6e:2b:e0:
3d:e7:b2:1c:57:84:a8:cf:3b:d7:24:4d:bc:43:13:
86:f1:0b:0e:9e:59:8f:bc:2f:d0:09:a4:c9:c5:8e:
b2:89:f2:77:b7:f7:0c:12:bd:cf:f4:91:0d:ba:46:
12:a6:9f:fd:90:6e:0e:92:12:8c:12:ba:31:cb:d4:
76:ee:31:e5:06:9f:7a:79:13:59:4c:34:d4:42:e5:
05:52:e9:ce:b0:c9:e6:80:1b:c5:aa:31:e2:1a:03:
b7:f3:e9:1e:6a:31:de:68:cd:da:29:42:81:e8:19:
78:31:37:bc:3d:00:2f:9b:b0:cb:ac:ba:eb:c8:c2:
12:f6:35:64:24:0a:40:1d:43:ef:2d:40:08:8a:93:
90:01:71:e8:66:84:ee:e2:93:06:a4:29:33:c7:91:
5b:de:c8:7f:f8:73:ad:b4:1e:49:61:c1:1f:62:ef:
22:b7:ea:25:e4:95:09:d5:a0:a7:7d:1a:bd:f3:0f:
cd:96:40:8d:bf:e9:38:ba:0f:f2:35:9d:26:d6:d4:
f4:58:e9:05:66:33:b8:f4:29:81:31:48:99:1a:66:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:B4:03:EB:7D:72:4D:F6:F3:39:27:7A:DF:63:4E:8B:74:28:7B
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fa:c9:2e:fa:41:00:17:60:26:57:50:f4:e7:23:c3:f9:86:
53:d4:63:08:2d:2b:03:62:4f:e2:d9:71:d8:99:b1:37:14:1e:
eb:c7:ee:61:8a:bd:b9:25:d5:3f:ba:ae:ff:63:f9:3e:5d:21:
6a:4d:11:28:08:2d:62:52:7c:68:bc:58:50:48:f5:ba:d8:da:
c5:9f:7f:1e:cd:27:2e:84:39:2d:60:fc:f0:e4:e3:9e:52:59:
5b:2e:01:39:17:7b:6c:8d:ae:3b:4c:9f:23:cc:d3:91:c8:e0:
e0:70:58:cd:50:c6:89:73:a7:23:a9:6e:d6:c3:8e:f3:4a:f2:
19:cf:4f:ad:94:bf:54:50:e7:e3:1b:1f:da:72:02:c9:3f:ff:
15:75:98:4b:6f:a4:48:20:e0:e3:0f:b2:97:c1:3a:a4:da:43:
ff:7c:d7:a0:2c:f4:d5:85:4f:cc:12:e9:f7:dc:1e:78:24:6e:
f5:a9:67:67:5a:87:13:f9:8b:48:9a:3f:aa:75:d1:f6:c3:1a:
c7:86:8a:b3:f5:e7:ed:3b:77:7b:ef:21:d4:e8:a4:5a:4d:e5:
58:58:0c:86:60:c6:41:7d:4f:97:d7:95:6c:46:f8:53:8c:fa:
47:b6:7d:11:ff:ba:b3:6d:be:7e:cf:69:ce:41:09:0e:08:a4:
82:82:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client