Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: VTCRGKnrrAeBWar2+ogRuxIvwA3JGIj/LMFUO1amqFs=
Subject key identifier: FB:C0:6F:58:65:42:02:E4:A8:B3:2D:19:44:1E:BF:2D:68:E5:39:C0
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0197586D4673BB8D3178124C33FBCC2B8733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 0879
Signing time: Tue 10 Jun 2025 06:00:45 +0000
Manifest this update: Tue 10 Jun 2025 06:00:45 +0000
Manifest next update: Wed 11 Jun 2025 06:00:45 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: oyhPCyf8n+SfFxU/j88TfB5tWoQYOx/C/Ofni/vEA0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:46:73:bb:8d:31:78:12:4c:33:fb:cc:2b:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Jun 10 06:00:45 2025 GMT
Not After : Jun 11 06:00:45 2025 GMT
Subject: CN=fbc06f58654202e4a8b32d19441ebf2d68e539c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:36:1b:1b:0a:79:4d:bd:f8:94:1f:c3:1d:
11:cf:7e:27:e5:cc:ab:fe:85:47:ad:c8:61:f5:1d:
e9:fa:5b:9b:75:da:a1:1a:e6:6c:33:68:e5:4a:75:
31:02:11:6a:ee:b3:65:aa:04:37:ae:59:d6:77:77:
ba:06:04:d0:89:bb:80:6e:7a:60:18:11:21:f5:e1:
69:f9:83:df:e1:01:d2:a0:67:55:74:45:de:0c:a3:
20:01:5a:dc:67:10:a4:19:da:ae:f3:68:04:c7:62:
97:42:b4:cc:fd:39:3d:ec:a9:20:0f:83:60:8f:9b:
3d:6e:07:0d:cb:c6:42:e5:84:b0:76:d6:6a:2f:c6:
2c:53:d7:5f:0a:bd:4c:30:29:d1:9b:4a:a0:d2:0e:
06:4c:28:fa:0b:d7:ce:e4:b5:32:8d:18:05:6e:2f:
74:56:49:06:47:1f:1a:4b:3c:4a:fa:b2:37:d3:a0:
11:15:67:2a:9e:0f:8a:ed:db:b3:7f:c9:1b:fb:8f:
ee:1f:f9:a6:71:fe:87:59:66:9d:46:71:ce:6c:e9:
77:ce:a9:c4:7b:c2:90:5d:71:8d:80:1a:ca:d0:a0:
a8:1a:d4:26:6f:0b:df:ea:ab:d3:6a:7a:5e:54:54:
7e:de:58:64:cf:02:8e:46:37:a0:b7:c1:b9:69:df:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:6F:58:65:42:02:E4:A8:B3:2D:19:44:1E:BF:2D:68:E5:39:C0
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c6:3e:54:7d:14:f5:82:a5:52:33:9f:7f:c2:29:c2:f0:65:
70:37:f2:87:38:f7:ae:9d:67:60:dd:d8:74:da:a9:34:23:51:
f6:c4:89:e2:c1:06:a3:ed:67:dc:31:1c:dc:93:36:8d:47:13:
dc:7e:7b:6e:51:2d:59:3e:23:2e:26:7a:c2:3a:76:24:60:68:
fe:a8:bb:10:04:39:82:00:b7:de:67:91:0a:63:50:ea:94:3e:
5d:be:c7:a6:7e:f7:af:c2:5d:73:92:10:62:8d:dd:c8:1f:40:
1a:f8:df:aa:03:c4:90:8a:04:57:de:66:ac:12:e2:a7:af:61:
a8:ce:09:89:67:be:5e:2d:fc:a7:e8:84:6e:e7:e5:9e:d5:da:
fb:6d:14:69:ec:de:7e:b5:89:e7:f6:df:b9:56:f6:0d:2a:2a:
98:f1:d2:c9:3e:e0:cc:14:9d:5d:a6:af:d4:de:f1:34:2f:bc:
ec:27:7b:f3:11:69:c0:a0:fe:b2:79:a3:ad:20:41:5b:b6:cc:
5c:57:e5:ee:49:b0:58:fa:76:0f:f0:c0:b9:68:e3:8a:7f:ae:
9c:d3:ad:f6:a5:9c:07:a5:bb:1e:82:32:25:57:9e:3f:e3:68:
6f:cf:d1:ef:8d:6b:b5:8c:97:7f:f9:5b:1b:64:ad:cc:dd:e9:
73:bd:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:22:25 2025 by rpki-client