Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: /l/QxdnLZYejmSeUCQzn/g9+M8vIHHUibhFptSiY3ro=
Subject key identifier: 87:0D:3B:AB:57:C5:67:53:CD:E0:00:B3:B7:8C:86:4C:3D:8D:9F:B8
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0199221F547F319355AC7FE4DFFA1D6BE273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 0966
Signing time: Sun 07 Sep 2025 03:01:42 +0000
Manifest this update: Sun 07 Sep 2025 03:01:42 +0000
Manifest next update: Mon 08 Sep 2025 03:01:42 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: f9gDSn170B0Ua0H9G1HDCZKXsDrLc70Dg81VTwxJifU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:54:7f:31:93:55:ac:7f:e4:df:fa:1d:6b:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Sep 7 03:01:42 2025 GMT
Not After : Sep 8 03:01:42 2025 GMT
Subject: CN=870d3bab57c56753cde000b3b78c864c3d8d9fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:59:38:4a:17:b9:e8:a1:a1:d1:79:6f:e7:
df:a8:af:d1:23:8e:69:ce:d7:d1:60:82:7a:3f:a6:
9d:ba:df:19:3d:e3:12:a3:5b:73:85:ea:36:d6:82:
c4:1f:e4:2f:9f:6c:26:df:90:d7:96:3f:56:18:fc:
3a:82:9d:74:16:22:49:5b:50:6d:e4:81:eb:ad:1c:
bc:db:b0:35:56:00:96:1e:70:04:3a:9e:f8:aa:35:
cb:5a:e5:fe:41:0c:64:dc:32:79:c7:71:3a:27:a2:
fa:75:62:36:10:58:37:b1:48:61:04:0f:0d:d5:f4:
e8:7f:86:79:e6:c3:cc:a4:c3:f6:ca:26:3b:39:7e:
67:c1:02:7a:6f:53:5e:7a:2c:3e:94:4a:29:4a:fd:
f4:9d:ba:1d:13:ce:5f:29:2e:90:6e:67:87:66:5e:
b6:de:75:9a:0b:21:27:83:fb:3b:74:a0:5a:da:75:
b9:e8:15:59:94:c5:fd:05:fd:89:e1:03:32:02:e1:
47:57:f1:0b:fb:63:eb:29:1b:ee:dc:76:7b:73:35:
71:06:d3:65:ee:14:20:92:ec:4f:dd:58:4b:98:16:
a8:ce:0c:fa:34:b1:99:ce:0d:fc:f6:3f:c5:a3:a0:
00:73:89:a5:37:6f:e2:46:2d:3d:7c:d0:58:2a:b4:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:3B:AB:57:C5:67:53:CD:E0:00:B3:B7:8C:86:4C:3D:8D:9F:B8
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:e6:01:26:9f:2f:78:10:75:9a:d4:b7:1d:a3:8f:bf:82:
3e:4b:b0:a5:4a:d0:fe:d8:6e:e6:93:6d:e4:8b:c9:25:e6:44:
d4:11:c9:f1:9b:40:5d:77:b5:b4:4e:b7:0b:33:15:43:cf:8f:
43:32:b3:35:a2:51:8c:d4:4d:cd:0b:8a:48:81:23:27:55:c8:
18:1f:e6:4f:8a:04:1d:19:f1:69:ff:42:95:83:6f:03:30:6c:
f9:31:c9:ef:f0:a2:fc:9d:b6:89:9c:f9:58:cd:19:42:ba:d2:
5e:62:19:8a:1b:dc:50:00:d9:17:63:82:33:7d:bc:2a:17:41:
df:c1:8c:a2:f5:2d:1c:24:e1:4d:34:8b:2d:03:4f:9e:e9:fb:
dc:96:9b:58:97:5d:8b:e4:31:0c:c4:3a:6b:02:67:06:4a:87:
21:48:b2:eb:ed:81:c9:0c:cc:16:7d:33:14:3b:73:89:e1:7f:
10:05:b5:4b:5e:a1:8e:40:01:75:7a:10:0e:00:5f:ac:d5:f2:
d6:60:76:36:e1:b0:7a:9e:7c:21:d0:32:05:bf:6f:b3:ba:28:
99:10:63:0f:8f:df:8b:7a:ab:17:d6:87:17:54:4c:24:44:8d:
61:b3:fd:88:55:2a:ea:43:0c:ce:79:b9:a4:91:ce:7e:46:8c:
46:53:0e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH1R/MZNVrH/k3/oda+JzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZiM2ZiYjQ0M2E0YmNmYjhmMjQ2ZmNmYTdmNWViYzhi
OTdiMzEwHhcNMjUwOTA3MDMwMTQyWhcNMjUwOTA4MDMwMTQyWjAzMTEwLwYDVQQD
Eyg4NzBkM2JhYjU3YzU2NzUzY2RlMDAwYjNiNzhjODY0YzNkOGQ5ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuZZOEoXueihodF5b+ffqK/RI45p
ztfRYIJ6P6adut8ZPeMSo1tzheo21oLEH+Qvn2wm35DXlj9WGPw6gp10FiJJW1Bt
5IHrrRy827A1VgCWHnAEOp74qjXLWuX+QQxk3DJ5x3E6J6L6dWI2EFg3sUhhBA8N
1fTof4Z55sPMpMP2yiY7OX5nwQJ6b1Neeiw+lEopSv30nbodE85fKS6QbmeHZl62
3nWaCyEng/s7dKBa2nW56BVZlMX9Bf2J4QMyAuFHV/EL+2PrKRvu3HZ7czVxBtNl
7hQgkuxP3VhLmBaozgz6NLGZzg389j/Fo6AAc4mlN2/iRi09fNBYKrRvQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcNO6tXxWdTzeAAs7eMhkw9jZ+4MB8GA1UdIwQY
MBaAFJLPs/u0Q6S8+48kb8+n9evIuXsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAt
MDVmMGNiNWVjNGQ4LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAtMDVmMGNiNWVjNGQ4
LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+TmASaf
L3gQdZrUtx2jj7+CPkuwpUrQ/thu5pNt5IvJJeZE1BHJ8ZtAXXe1tE63CzMVQ8+P
QzKzNaJRjNRNzQuKSIEjJ1XIGB/mT4oEHRnxaf9ClYNvAzBs+THJ7/Ci/J22iZz5
WM0ZQrrSXmIZihvcUADZF2OCM328KhdB38GMovUtHCThTTSLLQNPnun73JabWJdd
i+QxDMQ6awJnBkqHIUiy6+2ByQzMFn0zFDtzieF/EAW1S16hjkABdXoQDgBfrNXy
1mB2NuGwep58IdAyBb9vs7oomRBjD4/fi3qrF9aHF1RMJESNYbP9iFUq6kMMznm5
pJHOfkaMRlMODQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client