Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: HCnY6+KcXZJMCNKKjGvUtE5YmvlDx19dJNonkhxQiag=
Subject key identifier: CF:2C:80:E7:E5:C8:04:DD:86:81:DC:D2:28:53:EE:79:E8:09:70:B0
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 01976F99E6F6E1FC6F0539BA45893B78FD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 0885
Signing time: Sat 14 Jun 2025 18:00:46 +0000
Manifest this update: Sat 14 Jun 2025 18:00:46 +0000
Manifest next update: Sun 15 Jun 2025 18:00:46 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: m5ABpgsfX7WEbJPnpceIbfY+hJBK3yosQi50vL733nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:e6:f6:e1:fc:6f:05:39:ba:45:89:3b:78:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Jun 14 18:00:46 2025 GMT
Not After : Jun 15 18:00:46 2025 GMT
Subject: CN=cf2c80e7e5c804dd8681dcd22853ee79e80970b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:1a:9f:51:b8:2e:14:4e:23:8d:61:d9:09:
15:a8:10:87:48:64:b6:f5:66:df:22:2c:ac:97:60:
c4:5d:ef:78:2c:99:d4:f7:e7:ca:be:0d:62:74:b4:
12:e3:08:31:82:ab:12:e8:d1:44:0c:f6:62:2d:9d:
b3:89:c6:1a:9a:db:6e:21:7b:b2:0d:c4:13:d6:14:
a0:7a:7a:41:fc:a5:c0:fe:81:3e:c8:53:56:66:98:
1d:f2:40:55:f5:da:ef:b6:eb:80:b4:ac:4b:cb:f4:
66:11:0c:15:d4:54:b4:50:89:6c:2a:bf:62:e2:6e:
d4:ee:9c:03:2d:18:ce:65:b1:82:b3:1a:9a:8c:e2:
43:f9:d4:82:45:c9:84:89:a8:fa:ac:4e:87:48:47:
e2:c8:37:f5:51:2c:7b:bb:d9:61:b2:9d:ce:9d:a7:
e4:26:0f:72:ae:19:c0:6c:13:49:13:b5:30:1e:bb:
3d:77:47:de:99:60:9e:fb:6b:95:a2:de:18:a2:9e:
21:79:f5:83:7a:30:96:25:aa:94:4d:9c:d3:dd:89:
b2:3c:e0:1b:a3:5d:61:85:26:29:7f:ee:02:7d:98:
f4:ee:6a:a9:1b:c0:2c:68:4f:77:43:a6:cb:9b:c4:
af:4b:49:78:45:50:1b:92:87:7e:eb:65:62:e4:ef:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:80:E7:E5:C8:04:DD:86:81:DC:D2:28:53:EE:79:E8:09:70:B0
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:8d:be:69:73:fd:f0:91:b1:d4:53:39:55:62:5d:56:83:
b9:50:c7:41:9e:32:ba:c2:2f:2f:1b:16:5c:b4:17:54:9e:40:
5d:5f:10:16:00:2d:d2:e8:4b:90:08:bc:37:bb:a4:59:0c:0b:
7e:c9:77:2b:86:b6:6e:cb:c1:8e:d8:e3:a6:ab:b4:e6:a1:18:
c1:b1:c2:3b:1e:37:f8:44:b1:11:ae:f0:22:37:42:e1:cc:1c:
91:20:a4:54:ed:72:d2:10:33:cd:f7:2f:bc:67:e7:d4:df:c1:
2e:d5:9c:c4:0a:1c:c1:38:d0:f5:ab:95:d6:9c:fd:77:e5:94:
03:38:15:2b:a3:d8:23:89:a8:ca:ac:b6:f6:72:2e:c6:4c:a8:
a7:b7:38:6a:47:09:27:de:33:86:37:6b:be:ac:53:63:49:1c:
ac:5e:9b:3e:f7:d0:ed:89:5e:96:c4:f5:df:5d:26:57:d9:aa:
bc:5f:35:30:0f:9c:23:c0:05:e8:2e:2e:a1:6e:0c:b3:38:e5:
b5:9f:de:b0:ad:45:4b:a9:9e:5f:8a:dc:3d:3e:21:b4:b9:97:
40:92:4d:39:bd:e2:ee:a6:89:da:00:ff:65:7f:82:fd:87:40:
b6:ae:4b:04:77:fe:a0:f4:53:30:48:a3:a2:cb:67:2a:41:31:
17:8c:58:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmeb24fxvBTm6RYk7eP2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZiM2ZiYjQ0M2E0YmNmYjhmMjQ2ZmNmYTdmNWViYzhi
OTdiMzEwHhcNMjUwNjE0MTgwMDQ2WhcNMjUwNjE1MTgwMDQ2WjAzMTEwLwYDVQQD
EyhjZjJjODBlN2U1YzgwNGRkODY4MWRjZDIyODUzZWU3OWU4MDk3MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lkan1G4LhROI41h2QkVqBCHSGS2
9WbfIiysl2DEXe94LJnU9+fKvg1idLQS4wgxgqsS6NFEDPZiLZ2zicYamttuIXuy
DcQT1hSgenpB/KXA/oE+yFNWZpgd8kBV9drvtuuAtKxLy/RmEQwV1FS0UIlsKr9i
4m7U7pwDLRjOZbGCsxqajOJD+dSCRcmEiaj6rE6HSEfiyDf1USx7u9lhsp3Onafk
Jg9yrhnAbBNJE7UwHrs9d0femWCe+2uVot4Yop4hefWDejCWJaqUTZzT3YmyPOAb
o11hhSYpf+4CfZj07mqpG8AsaE93Q6bLm8SvS0l4RVAbkod+62Vi5O8OCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8sgOflyATdhoHc0ihT7nnoCXCwMB8GA1UdIwQY
MBaAFJLPs/u0Q6S8+48kb8+n9evIuXsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAt
MDVmMGNiNWVjNGQ4LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAtMDVmMGNiNWVjNGQ4
LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSWNvmlz
/fCRsdRTOVViXVaDuVDHQZ4yusIvLxsWXLQXVJ5AXV8QFgAt0uhLkAi8N7ukWQwL
fsl3K4a2bsvBjtjjpqu05qEYwbHCOx43+ESxEa7wIjdC4cwckSCkVO1y0hAzzfcv
vGfn1N/BLtWcxAocwTjQ9auV1pz9d+WUAzgVK6PYI4moyqy29nIuxkyop7c4akcJ
J94zhjdrvqxTY0kcrF6bPvfQ7YlelsT1310mV9mqvF81MA+cI8AF6C4uoW4Mszjl
tZ/esK1FS6meX4rcPT4htLmXQJJNOb3i7qaJ2gD/ZX+C/YdAtq5LBHf+oPRTMEij
ostnKkExF4xYOw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:03:43 2025 by rpki-client