Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
File: kjlpG6eScAY69DZNMIYxNl6QEWo.mft (raw, json)
Hash identifier: puUG5H/S0BEdcI7hifkXI8sGmVoXuliUikCqTl68lks=
Subject key identifier: CC:A1:4B:FC:A4:58:89:32:FD:69:35:F9:8E:E9:B0:CE:7D:56:21:89
Authority key identifier: 92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A
Certificate issuer: /CN=9239691ba79270063af4364d308631365e90116a
Certificate serial: 01984664DF11C9475EAAB5C76211E7FADD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
Manifest number: 0D59
Signing time: Sat 26 Jul 2025 11:01:12 +0000
Manifest this update: Sat 26 Jul 2025 11:01:12 +0000
Manifest next update: Sun 27 Jul 2025 11:01:12 +0000
Files and hashes: 1: kjlpG6eScAY69DZNMIYxNl6QEWo.crl (hash: ZQSPXTy41qMeRG0/bynfyl6HhVEeSmUa8wYvwn/KmTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:df:11:c9:47:5e:aa:b5:c7:62:11:e7:fa:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9239691ba79270063af4364d308631365e90116a
Validity
Not Before: Jul 26 11:01:12 2025 GMT
Not After : Jul 27 11:01:12 2025 GMT
Subject: CN=cca14bfca4588932fd6935f98ee9b0ce7d562189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:bf:9f:51:c9:48:50:7f:4a:1f:17:62:e4:
05:e2:d8:37:fc:20:30:3e:ee:59:bd:cc:4a:3e:8a:
db:5c:e6:17:62:b0:8f:1b:58:11:14:80:36:bb:f3:
b7:1d:5a:ce:a4:71:fb:67:32:65:57:fc:ef:2d:e3:
1c:04:db:19:ad:5c:9c:14:1d:e4:43:d3:f7:c3:b9:
58:74:7f:77:cf:70:51:4b:ea:98:16:f9:af:ba:fb:
fc:a7:f5:2f:68:3b:11:c8:2b:61:c8:e8:85:3a:33:
9f:f2:5f:c0:d5:91:4c:7b:78:14:11:fa:62:40:84:
6f:6a:bc:86:56:ab:47:be:35:fe:d8:5b:c6:18:68:
72:f7:1d:21:60:7a:81:3a:f9:1c:7a:c4:a5:60:db:
fe:25:e9:ea:c3:e4:44:c8:4f:c6:94:e7:3e:bc:b8:
26:bd:f4:4a:51:74:87:34:bf:e9:27:35:3c:48:50:
c4:34:e6:ea:66:d0:bc:31:e2:04:5e:7e:58:3e:30:
b7:0d:b1:f1:cf:fd:b5:6c:dd:86:5b:36:e2:f8:74:
60:b9:ca:19:73:d8:a0:1d:3f:cf:c9:26:39:6d:62:
22:b9:79:50:2e:dd:4f:ba:68:58:ab:bd:22:1c:a6:
8d:1c:02:3e:32:4f:f5:2e:15:02:38:85:65:0a:0c:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:4B:FC:A4:58:89:32:FD:69:35:F9:8E:E9:B0:CE:7D:56:21:89
X509v3 Authority Key Identifier:
keyid:92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ab:7c:a6:be:d2:d0:fb:f9:18:29:e5:94:6a:02:36:74:f7:
09:ab:df:b7:90:d6:78:ac:b8:0c:e2:7e:df:3b:71:9b:e4:af:
48:84:e6:10:2a:8a:9c:1b:72:24:25:6e:1c:33:a1:81:9e:25:
16:d9:89:1d:74:ef:65:b4:d3:8a:c7:c1:c8:b1:9f:fa:7d:30:
94:82:24:95:8b:7c:f7:c8:82:88:ac:59:2f:92:17:78:0e:59:
c9:a7:e4:64:b0:df:9e:a8:21:8a:7b:51:9b:a3:99:8c:e3:53:
5d:9f:8b:59:17:a5:42:9b:56:a1:70:e6:03:bf:31:68:0e:95:
8e:fe:34:e0:e4:65:10:89:0c:3a:c9:8b:94:92:71:65:4d:59:
4e:ff:d6:e4:8d:42:1d:74:f5:c3:c4:81:79:82:b3:4b:c6:72:
58:a3:47:d8:dd:2f:a1:f3:12:4f:25:58:23:f4:0f:a1:31:e6:
25:b6:74:a2:79:03:cd:db:75:7b:f8:cc:c4:68:ae:93:14:82:
eb:40:b1:da:16:f7:c0:5a:d8:64:fa:70:2c:6e:a5:4c:db:f4:
f0:45:a5:fb:6d:5c:3d:e1:d2:85:a6:93:84:5b:7f:de:fd:01:
c9:9a:d0:26:86:b8:c8:f9:38:65:ce:14:50:6d:d3:a0:7e:1d:
a1:da:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:10:25 2025 by rpki-client