Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: qL2+8MMCmbJYMX9GmTmM2sy8XWnWw/kfns6t1xyd1Ro=
Subject key identifier: 01:E8:8E:E7:1F:79:85:E6:65:EF:FC:D4:46:7E:62:23:08:87:DC:74
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 0198529F4E1F05878D871BA86C6E2427789B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 032D
Signing time: Mon 28 Jul 2025 20:00:28 +0000
Manifest this update: Mon 28 Jul 2025 20:00:28 +0000
Manifest next update: Tue 29 Jul 2025 20:00:28 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: 2JPUWz9fb29a9JHrI2dNXToILcg25USdd016zCES5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:4e:1f:05:87:8d:87:1b:a8:6c:6e:24:27:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Jul 28 20:00:28 2025 GMT
Not After : Jul 29 20:00:28 2025 GMT
Subject: CN=01e88ee71f7985e665effcd4467e62230887dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:7a:c5:17:4b:29:9b:d2:55:6d:fd:49:f6:
ad:c4:76:09:c3:30:1d:2e:80:c9:df:ea:39:c8:67:
33:66:19:1d:5c:6f:c1:c1:1e:b8:c5:9f:4a:2b:31:
b1:63:0e:d6:29:4d:d3:cd:d3:37:a0:2f:f9:2d:e5:
f9:d5:e4:15:e6:0b:bd:a3:ae:3d:4f:88:94:8c:50:
c3:77:bc:bb:db:e0:94:ab:3c:73:1b:d8:50:da:79:
be:ee:40:b2:0d:98:d2:a8:ba:14:f4:14:8f:95:20:
08:14:1b:d6:c3:ac:18:17:c4:e8:5d:f1:5b:0d:e8:
41:2e:34:ca:b5:05:58:ff:70:f4:44:05:88:56:ab:
e1:68:d5:cb:a0:2e:6f:da:28:4f:6f:cb:15:c3:f6:
71:98:0f:27:c3:d1:7a:2c:94:5b:b7:7f:90:24:77:
f1:f0:86:3f:4f:54:d9:e9:30:fd:ae:82:bd:69:61:
d7:56:47:f5:70:d9:04:86:02:4d:28:4a:d6:a3:af:
f2:cd:9a:74:49:94:8c:91:1a:f5:96:26:89:fb:9b:
8b:31:94:1e:75:72:4f:12:46:bd:47:3f:49:3a:54:
e3:58:22:a3:86:58:cb:a2:78:08:65:ce:df:0c:b3:
45:99:8c:0d:25:f7:f9:79:35:9c:2f:8c:c5:c8:0d:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:8E:E7:1F:79:85:E6:65:EF:FC:D4:46:7E:62:23:08:87:DC:74
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:cf:3c:1a:00:29:90:13:2d:b2:2d:4f:34:24:85:ba:29:
d2:f2:c2:11:29:49:23:05:12:59:20:52:23:c8:e7:a0:f0:1a:
af:6d:1d:ff:c3:6c:c6:2c:c9:fc:9e:5b:7d:22:a7:b4:64:3e:
e5:47:cb:cc:11:9f:98:1a:4f:f1:74:19:0b:ac:e1:f4:c5:c5:
0c:9e:5f:eb:57:a1:06:a1:6a:81:9d:ac:09:99:16:1c:4c:35:
dd:31:f5:44:70:e2:ab:0a:01:28:98:ac:c0:bf:cb:63:2e:8f:
05:24:ca:94:69:ed:2b:fe:6d:8a:0f:42:e2:98:6c:c3:d2:54:
d6:37:75:a0:05:42:a4:47:2a:9b:66:c2:7d:32:22:c0:b2:78:
a7:64:ea:83:ee:5c:e9:09:d1:80:02:f9:31:bb:42:1a:19:f6:
9b:06:99:5b:05:03:ad:c3:21:61:86:52:06:d2:39:2a:4f:85:
0f:a4:6c:4a:e0:e5:9b:06:29:fc:9a:c6:2e:fc:5d:b3:55:97:
f3:2f:b1:d7:61:c4:77:4f:2d:6f:fd:c8:7c:b4:a8:58:ce:e1:
2b:f3:78:03:7b:ba:82:34:ad:56:69:80:e5:60:9e:b7:2f:25:
9c:88:6e:19:f6:23:e1:90:d9:f1:42:bc:60:af:1d:40:f9:5c:
0e:89:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:46:03 2025 by rpki-client