Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier: /IHPi9/kkCyBxUC7p0fTwKWbQWkiguLKbZC6se6Eruo=
Subject key identifier: DF:76:D4:84:DC:67:57:DD:84:28:4F:61:CF:BA:5E:1A:E5:AD:FA:E4
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial: 019846D1BADABB81CC69D4DBA3FEA4EE603C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number: 0E15
Signing time: Sat 26 Jul 2025 13:00:06 +0000
Manifest this update: Sat 26 Jul 2025 13:00:06 +0000
Manifest next update: Sun 27 Jul 2025 13:00:06 +0000
Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: 8+0IIjS3KEptqbbroGF+5jcmx2rpbwMbzktYUmNT3AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:ba:da:bb:81:cc:69:d4:db:a3:fe:a4:ee:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Validity
Not Before: Jul 26 13:00:06 2025 GMT
Not After : Jul 27 13:00:06 2025 GMT
Subject: CN=df76d484dc6757dd84284f61cfba5e1ae5adfae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:1f:9e:e3:15:6e:b6:b4:4a:04:93:29:40:
b9:1c:07:10:a1:d0:d2:1c:01:35:68:24:25:4a:b7:
93:fd:42:32:3a:2b:79:68:9c:9d:92:b3:e0:05:80:
fb:4a:a1:e0:8a:59:57:03:b9:5f:61:ef:ed:80:30:
47:4a:7f:ba:18:9b:8c:94:15:be:d2:c3:84:ee:27:
09:fe:aa:ad:0c:b5:ab:3c:1c:c4:f5:9b:21:87:ea:
de:e0:fb:24:78:29:1f:d8:d5:3d:b1:ac:df:6d:5e:
2c:c2:83:b9:c3:40:ea:8d:f6:72:d4:4f:0a:69:1d:
60:5d:df:f0:16:de:07:46:6d:2e:2e:30:5b:b7:c7:
ce:d1:95:3b:12:24:b8:4e:7f:bd:4d:03:5f:ae:8f:
c3:4b:5d:13:88:5a:9d:d4:79:a3:bb:22:41:ce:45:
ea:fe:42:bd:35:72:af:5d:52:0d:49:82:65:eb:4c:
72:04:d5:9b:3c:94:62:eb:ff:62:65:4b:61:89:3c:
9a:03:3f:fe:49:9a:9d:d0:4a:95:34:fe:df:c0:7e:
be:5d:7c:1c:bb:27:7f:bb:6f:b7:d5:0b:6e:0c:a2:
8c:07:cc:c2:19:ad:08:77:4a:68:ce:b1:fa:25:31:
ed:06:98:79:68:a7:ee:e6:8a:85:20:85:b9:8a:46:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:D4:84:DC:67:57:DD:84:28:4F:61:CF:BA:5E:1A:E5:AD:FA:E4
X509v3 Authority Key Identifier:
keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:27:4f:b9:84:78:97:98:ce:d7:0b:a7:98:40:c2:09:53:
91:c1:51:5c:67:e3:3e:61:5d:80:26:93:ad:89:ec:52:44:3f:
b5:0f:c4:37:9b:a3:8b:e3:fd:b5:15:e6:2b:0d:a6:92:a5:3f:
04:37:8f:64:32:e7:40:b8:0c:4f:94:9c:65:ad:b7:24:60:5e:
4c:56:cc:2c:06:39:d6:c9:fd:d3:a1:fd:9e:11:5c:01:b4:5f:
9b:51:6b:3d:17:23:ac:85:41:27:5d:cb:e6:5c:a0:42:15:a6:
a9:08:8d:9c:29:a0:47:39:5d:94:7a:60:79:2e:5f:57:6a:fa:
71:95:40:1e:f6:8b:16:e9:c1:50:db:90:7b:0e:61:20:e1:00:
90:e3:42:b0:99:2e:2c:c9:88:87:21:ec:e7:fc:a2:a4:a2:86:
cb:2a:7a:7d:28:18:d0:24:97:eb:1c:f9:53:9f:86:49:71:31:
5f:d4:77:d5:9d:a2:5f:4f:ae:53:41:f5:e6:35:9d:41:f6:c8:
f9:36:1c:77:9a:3d:ba:24:b2:89:bd:e2:20:1e:fe:6f:76:d7:
96:aa:9b:f9:ce:6a:f4:c4:d6:d7:c0:14:a9:10:83:50:44:07:
8f:26:94:63:4f:ac:1a:ff:78:99:25:05:86:ff:d1:be:30:42:
8b:a0:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:19 2025 by rpki-client