Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: h8COqJdPcJVTwnbZqw8gs9h5R22MCeIwriNh8Qq97H8=
Subject key identifier: 90:2B:5A:DD:F1:0C:17:34:DD:4E:19:B7:1B:18:35:AD:1D:AA:5C:F2
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 01984A0A3BBFE040E7BA52E9428F1FADCD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 1518
Signing time: Sun 27 Jul 2025 04:00:41 +0000
Manifest this update: Sun 27 Jul 2025 04:00:41 +0000
Manifest next update: Mon 28 Jul 2025 04:00:41 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: 5ESEjX0qspx9A6/bGHZ0YixLmA7ETuKnnYtX+g0jgn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3b:bf:e0:40:e7:ba:52:e9:42:8f:1f:ad:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Jul 27 04:00:41 2025 GMT
Not After : Jul 28 04:00:41 2025 GMT
Subject: CN=902b5addf10c1734dd4e19b71b1835ad1daa5cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:c6:b5:c4:8b:9a:97:99:4d:26:b0:e6:0f:
c1:c9:13:dd:78:1a:e1:d9:53:f1:b4:48:6f:3d:e0:
6c:71:93:d6:5b:5c:cd:d2:67:83:85:de:fd:05:4b:
2f:bd:f6:09:36:91:23:fa:7f:c5:aa:4a:30:e5:3a:
10:a3:85:b1:0b:4b:07:4e:de:d3:31:2d:92:23:71:
aa:47:9d:0f:c0:31:db:da:21:11:c6:2e:0a:53:ee:
b3:59:9f:65:7d:b0:d1:d2:69:13:a7:26:fa:35:9a:
0a:c4:d3:e3:25:f3:1f:7c:10:5f:0f:e2:c1:4c:e8:
42:0f:31:86:f6:af:ab:4f:ce:41:38:50:dc:46:e3:
e3:35:f4:f8:4f:4d:bd:7f:86:bd:06:5e:ca:5d:a1:
b6:5e:d6:b0:d5:c2:4d:8f:81:c0:54:bd:d3:cc:24:
05:e7:c8:06:a4:8b:81:33:3c:05:f2:dd:92:eb:ba:
7e:f2:26:21:47:11:50:cb:fc:dc:96:fb:2d:3b:35:
f6:ad:ad:29:ec:94:b8:d6:ee:7b:2e:38:64:42:05:
8c:15:24:29:5d:02:3b:f1:bf:6c:d0:c6:9f:ce:17:
0c:0d:b6:12:0c:29:d4:55:86:28:0d:b2:e0:22:5a:
f8:44:86:5a:6e:2f:c8:7c:ed:a9:c8:4e:d7:8a:b6:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:5A:DD:F1:0C:17:34:DD:4E:19:B7:1B:18:35:AD:1D:AA:5C:F2
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d3:15:44:c6:59:c3:b7:3f:10:70:dd:84:b5:0a:24:e9:d9:
73:72:13:c4:8f:d2:e4:45:07:3a:8f:a4:68:8e:38:1a:bb:1b:
4c:d1:77:e7:47:1b:4c:36:bc:37:f6:22:17:0c:1e:25:17:de:
d2:38:41:8e:90:a6:eb:6a:72:f3:5a:af:03:cc:ed:f0:d4:2c:
38:35:22:34:41:8a:76:5f:88:80:4d:06:c2:e7:0b:8b:1f:19:
fe:f3:20:08:e2:96:5e:55:b1:ad:87:30:ad:31:78:e6:45:5c:
85:3e:86:47:5d:09:49:02:2e:af:5d:19:97:ce:b3:5b:e7:0e:
fc:52:ba:32:66:9d:e3:7b:a3:ae:d7:d7:68:a7:6d:41:0f:93:
7f:1c:c4:4e:1a:a1:39:f0:15:8f:da:10:06:b9:57:51:31:16:
e5:f5:e2:80:de:02:5c:96:3b:ea:8b:53:b0:bc:2c:42:3c:15:
bb:2e:99:de:1d:01:bc:32:51:a8:d1:c3:24:c7:c1:6e:ca:e5:
e7:e0:b0:52:cd:fb:d5:db:5e:e7:09:ec:ff:fe:e7:b4:2c:ce:
fc:90:3e:0b:60:bd:2f:43:51:04:8c:f2:80:f6:c4:f6:b3:f4:
38:b5:67:0f:ea:8f:5a:08:ab:34:e2:f7:dc:b7:9a:57:f9:cf:
7b:3b:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:19 2025 by rpki-client