Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: kWn3NzrNCVU31mCrKMAoZKu+mzBx9q87NogWv95mqi0=
Subject key identifier: 71:B7:FB:AA:32:01:7C:55:6B:FB:38:E0:EE:0A:DC:D1:AC:9D:9F:E4
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 0198518CEAA504EA93BAADDC5814B7CB984B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 15:00:46 +0000
Manifest this update: Mon 28 Jul 2025 15:00:46 +0000
Manifest next update: Tue 29 Jul 2025 15:00:46 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: E3AVJ1cfLbZVIymUprYjHsdwX8O/rJKQ+YyrhbXRE04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:ea:a5:04:ea:93:ba:ad:dc:58:14:b7:cb:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Jul 28 15:00:46 2025 GMT
Not After : Jul 29 15:00:46 2025 GMT
Subject: CN=71b7fbaa32017c556bfb38e0ee0adcd1ac9d9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:6d:9d:04:ce:b2:ca:95:af:5e:d9:f0:e6:
19:08:44:f6:1f:e8:f0:ba:3f:c3:35:24:9c:f2:2b:
e7:39:98:06:5e:96:3e:5d:ec:c9:14:28:3a:c6:8a:
73:df:75:c5:76:de:ed:a0:fb:9d:81:96:8b:3d:86:
73:0c:78:52:ea:64:43:51:45:ae:59:3c:5e:e1:96:
82:cc:bf:44:01:56:86:a3:42:0a:c2:b0:53:c8:b7:
07:4a:03:f3:2a:37:21:e7:c0:83:3f:c5:e6:f0:61:
ed:72:c8:4d:b6:f5:db:5b:33:b6:08:82:f6:42:37:
50:aa:f8:c5:d9:d6:31:e2:8f:0d:d2:fd:d7:4d:8a:
8b:25:41:f4:04:6b:94:ed:eb:68:1d:f0:fe:f0:ae:
8d:c1:d7:d4:60:24:d8:c0:f8:7b:be:1e:14:45:0c:
b4:bb:17:19:f6:b0:32:ac:4e:e1:e8:20:d4:3a:1c:
39:f0:cc:4d:2d:3e:6e:0a:0b:ba:b8:65:0b:38:ba:
3a:aa:0b:b9:3e:42:f0:19:37:5b:5c:b5:5a:ea:c5:
95:50:d3:cf:26:6a:7f:7d:16:2b:2d:24:4f:6f:c6:
94:1c:26:5a:49:d1:de:ca:b5:53:9d:48:b4:ae:b3:
d2:11:91:02:e5:11:74:fa:50:1f:ee:13:6a:60:f7:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:FB:AA:32:01:7C:55:6B:FB:38:E0:EE:0A:DC:D1:AC:9D:9F:E4
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0e:ef:27:a2:cc:21:cc:40:bd:c6:65:4d:bf:c3:72:02:fe:
9f:d2:f4:af:d8:4a:76:64:47:d5:7f:49:2c:f6:37:2f:d0:82:
7e:9e:05:c1:c8:0a:72:bb:c1:c2:1d:d7:3a:c0:7a:f9:51:1e:
c2:d0:48:0e:60:bd:31:78:49:ea:f9:fd:b4:8b:fd:09:59:c9:
c2:b7:fd:33:41:3d:05:ea:39:eb:7f:79:1e:aa:eb:54:a2:19:
40:fe:a9:95:2e:a6:a2:96:e7:9e:e9:03:31:a6:11:7c:e2:06:
d4:0a:47:c5:8a:f6:0b:e0:6f:78:56:dc:87:a9:c7:f6:58:6b:
25:5f:c4:6f:a5:a7:84:a4:e3:f3:ac:ef:c5:88:7b:7b:a5:29:
13:c4:1e:12:af:15:da:16:e4:3d:7c:99:6f:86:f3:72:db:5b:
59:be:f3:a7:45:67:99:a1:e0:58:20:44:4c:20:5c:c5:cd:e9:
f7:5a:ed:cb:17:20:36:7b:1e:ec:df:14:9b:67:76:29:eb:1b:
19:a6:ca:a4:ac:15:14:d6:65:cf:6a:05:c7:e7:e8:f7:d7:0c:
cc:44:78:e7:50:ad:d4:6d:44:e7:bd:bf:08:dc:41:0e:d2:0d:
b0:bf:52:93:64:38:c6:dd:f8:05:9e:90:4a:90:23:c1:70:49:
31:c2:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:49:32 2025 by rpki-client