
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
File: KY60_lwZ8pLyiSTL8VVaj1do2CY.mft (raw, json)
Hash identifier: cRFEGTnTjgicniGxpuedhOldqCvfuAf7AQ8497B/lh8=
Subject key identifier: 8B:2D:40:59:03:A0:35:5B:63:2A:21:7B:10:58:EA:B7:3E:0A:5A:97
Authority key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Certificate issuer: /CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Certificate serial: 01984964F55DD559BF5D30686724F7C40C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: KY60_lwZ8pLyiSTL8VVaj1do2CY.crl (hash: ie+qB/6dNX6qniJqqWLwjtfeoXc5mQCl5ho6kNsouhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f5:5d:d5:59:bf:5d:30:68:67:24:f7:c4:0c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=8b2d405903a0355b632a217b1058eab73e0a5a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a9:28:1e:77:1f:c6:df:63:19:ae:ec:75:c7:
cd:9b:71:58:14:88:5c:18:60:10:6d:1a:2c:6e:33:
61:af:90:c6:11:62:5b:fe:3c:8a:5f:79:b5:21:39:
18:ec:cb:63:9c:8b:f2:77:3b:32:8d:c6:6c:26:f8:
26:8d:16:26:2c:7d:6c:0c:f4:65:f3:b8:0f:0f:7c:
de:91:21:8f:9e:b2:e7:b9:15:37:aa:b4:10:5e:48:
db:85:e9:c7:99:d8:40:46:69:6e:ee:9f:04:58:33:
bc:4e:46:e1:a8:dc:9d:62:de:fe:a9:86:72:15:e7:
58:3c:80:3f:d4:f8:4b:5c:e5:39:f8:c4:bf:73:c4:
b5:96:d2:7f:62:c4:9a:1d:63:1b:42:78:f1:00:e0:
84:71:f3:69:26:41:9e:cd:50:30:5d:b8:eb:03:67:
ed:da:24:34:79:a8:2e:ff:06:55:67:b6:6c:f3:2c:
57:7e:4d:d5:45:92:8e:e6:50:74:2b:f1:c9:ab:be:
4b:3e:36:f4:61:f8:d4:42:ba:87:5c:52:bd:a2:0b:
86:2d:3b:c6:d7:86:0b:ea:96:aa:26:c0:92:6c:07:
03:67:91:7a:6a:da:e8:94:0a:11:78:f4:b2:ab:76:
5e:59:d8:64:c0:62:32:66:96:cf:0d:eb:7f:2d:89:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:40:59:03:A0:35:5B:63:2A:21:7B:10:58:EA:B7:3E:0A:5A:97
X509v3 Authority Key Identifier:
keyid:29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bb:2e:e1:5e:0d:fc:8e:24:5e:8f:84:6a:a8:3b:19:17:9b:
53:3a:5c:a0:2c:9c:6e:1c:6f:68:24:33:02:50:f3:52:82:02:
e0:94:59:5d:71:8c:ab:19:71:16:5f:48:fa:30:a3:30:3c:92:
7d:42:e3:5c:b0:40:cb:d6:f2:15:ec:40:e1:3f:34:2c:5c:e2:
15:48:50:8e:3d:1b:3d:69:e1:52:b0:29:b2:50:50:93:2b:a4:
74:19:5f:a5:44:6b:b3:a2:7f:63:72:6c:93:30:d0:47:6b:30:
d0:bf:b0:b4:d8:55:9b:7d:01:83:b9:83:e0:82:04:6a:10:6c:
17:9c:c0:6d:d8:a1:5f:99:55:cf:7b:62:0f:da:a4:4a:5e:68:
31:98:78:95:90:a8:0c:30:c1:b7:e1:60:a9:e5:f5:9d:86:18:
3b:9e:a3:6f:21:12:c2:6c:6c:05:9f:5b:51:44:28:29:70:2a:
2f:e9:3b:95:1d:7e:38:c4:c9:8b:ce:a0:8e:04:34:b7:9a:35:
0e:29:ab:09:9b:80:06:57:75:2f:d3:23:ed:1a:50:d8:35:ca:
46:ef:d3:eb:6a:a3:8c:06:df:07:1b:5d:d6:9a:40:23:f4:a4:
ef:e5:b4:a6:d3:23:3b:46:31:dc:40:98:e9:2a:b7:73:c9:86:
fd:80:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:01 2025 by rpki-client