Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: WJZuyKaAsoqkVsm8LOiShx8ioM3QvDYXXFdSObmkQwo=
Subject key identifier: 64:F6:BD:69:55:71:56:23:78:54:7F:51:43:64:A2:04:3D:5B:B7:2E
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 0198481B82ADA74DA54A9E292A65824EA3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 19:00:19 +0000
Manifest this update: Sat 26 Jul 2025 19:00:19 +0000
Manifest next update: Sun 27 Jul 2025 19:00:19 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: mY+sCrIDLDoQJ3qxg3WM2E6BZk91oXztcdOu+VQA00k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:82:ad:a7:4d:a5:4a:9e:29:2a:65:82:4e:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: Jul 26 19:00:19 2025 GMT
Not After : Jul 27 19:00:19 2025 GMT
Subject: CN=64f6bd695571562378547f514364a2043d5bb72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:50:6e:47:c9:19:7d:57:07:6a:4f:6b:88:
84:1e:45:cc:a0:bc:a3:f0:60:5f:5e:55:0c:a5:f1:
19:12:43:d9:2f:73:c5:c9:6f:eb:22:96:c7:e8:db:
50:ef:1f:15:b5:3d:e5:77:b9:e5:2e:3b:78:00:b9:
75:83:0c:22:a8:af:a1:f1:85:33:d6:0f:2c:69:e1:
45:d0:f1:98:f6:48:18:7d:e4:0a:c4:44:b4:c8:be:
c6:31:10:1a:e4:c7:d6:9c:b5:d2:bf:d3:4f:1e:35:
0a:ee:ca:19:9e:4d:a6:a4:6b:b4:69:1a:4c:cc:2e:
5b:34:8c:c8:63:6a:95:87:9b:fb:90:91:5a:a5:49:
54:58:35:3a:52:5a:64:4f:79:a4:dd:a4:27:5a:93:
d4:e1:0d:02:90:74:fc:64:80:3d:5e:30:7f:f9:ce:
e6:2c:bc:2a:18:1f:f5:38:b1:55:5c:9c:bd:40:65:
46:4d:df:52:47:db:16:62:5c:1a:1c:a2:60:0d:af:
63:c8:c7:59:40:f6:13:a3:eb:6d:c7:6e:d6:4a:b8:
47:73:00:de:d8:34:70:97:f4:07:f6:bb:31:d9:18:
55:7f:fa:84:73:46:ff:69:51:39:3f:c5:0e:9d:ef:
98:c7:e0:78:b0:ec:0e:40:2c:6f:64:c1:5b:e7:e7:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:BD:69:55:71:56:23:78:54:7F:51:43:64:A2:04:3D:5B:B7:2E
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:f2:79:0d:04:79:d7:dd:86:60:82:49:98:7d:ab:4e:0a:
84:c1:f9:88:54:10:34:16:d5:7b:46:40:ad:8d:4f:52:e5:ad:
7a:69:6a:9e:89:81:da:66:8c:cb:7b:23:2e:a9:84:a9:04:8b:
1c:2c:0b:e6:e8:83:99:b9:2e:f6:94:f6:2c:05:fe:77:d7:4a:
1b:fc:ae:10:15:58:3a:b0:f9:57:70:17:0a:87:a2:b0:7f:04:
bb:3e:a7:1c:08:70:6f:87:4d:d7:e6:e7:80:41:0b:fa:ac:c6:
e4:30:86:71:18:30:b9:ff:44:11:5b:ac:39:41:01:4d:19:45:
8a:07:ff:5d:1f:dc:61:66:9c:7b:be:f2:42:61:19:05:b7:3e:
12:fa:59:69:55:d1:6d:27:5a:6d:b8:b2:6b:b5:fa:ba:27:fe:
ca:54:88:06:60:fe:f6:34:89:2a:3b:b1:c6:94:43:f9:be:8e:
c6:53:4b:9c:17:c0:9b:ae:4b:95:8e:68:e4:43:96:ba:52:16:
57:32:d2:b8:59:68:3a:b2:1d:04:40:c6:ad:66:8f:98:54:29:
70:54:7b:40:c5:75:0d:ff:71:b8:2c:c0:e8:94:77:00:ac:36:
c2:59:80:ab:6f:51:88:38:2c:8d:58:e2:d1:45:27:3d:d0:c6:
a5:50:76:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:27 2025 by rpki-client