Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: Ca+IzpOq3o80AJdaajMg5GD1i/aeF15kfKoG6xwCvJ0=
Subject key identifier: 37:1E:9D:32:EE:12:5B:55:3E:35:E9:2D:72:72:8F:1D:4C:41:9D:37
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 01984B558151CA745FE02AEE66AB87D99612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 0FFA
Signing time: Sun 27 Jul 2025 10:02:31 +0000
Manifest this update: Sun 27 Jul 2025 10:02:31 +0000
Manifest next update: Mon 28 Jul 2025 10:02:31 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: WRcIXSPlszs3iSarH8pTAfrZKS23DPhZlZwmVkAKzvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:81:51:ca:74:5f:e0:2a:ee:66:ab:87:d9:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Jul 27 10:02:31 2025 GMT
Not After : Jul 28 10:02:31 2025 GMT
Subject: CN=371e9d32ee125b553e35e92d72728f1d4c419d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:c6:28:70:4e:ed:92:57:d3:b3:be:29:c3:
9d:14:ab:ad:78:c8:32:c2:a5:33:90:90:f5:69:fd:
ba:13:72:6a:ae:73:42:8d:92:c3:73:e2:17:ec:ea:
98:9e:46:83:99:6b:d4:75:75:72:75:ac:06:f4:d1:
08:fd:40:ea:c8:cc:22:25:6f:35:ee:64:2f:45:3e:
c9:68:af:9e:a2:46:e3:86:12:c6:07:26:8f:14:23:
84:59:86:61:b9:a4:6f:bd:6a:45:ea:53:91:ed:76:
76:01:94:db:5c:1a:50:04:b0:65:3f:67:06:5a:26:
64:39:c8:95:72:54:a8:bf:c5:d9:9e:b2:41:50:ff:
ed:96:ae:a2:80:b5:e3:83:2a:fc:e2:49:ee:16:12:
42:8e:92:42:95:a9:1f:4e:d5:36:b5:fc:82:70:46:
d9:4b:8f:b8:92:5a:c0:7e:8e:68:94:d5:d5:e4:0a:
2a:67:bf:a7:05:55:13:24:be:73:4c:99:f8:79:5e:
26:ff:d8:cd:f2:b5:b5:cb:ee:e7:4e:85:9d:10:71:
cd:6e:1b:5c:ef:3a:db:89:a9:1f:cf:88:93:0a:f1:
cc:e5:97:36:75:e0:b9:18:a0:f8:30:4d:7e:ae:75:
b8:9d:73:33:c6:12:7f:ec:c1:1c:5d:05:05:42:a1:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:9D:32:EE:12:5B:55:3E:35:E9:2D:72:72:8F:1D:4C:41:9D:37
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:63:ae:d3:3a:fe:04:90:67:c6:e6:f2:f1:5b:35:8e:f8:e7:
56:c5:2a:42:31:41:8d:12:ad:5b:a2:ef:15:d3:60:57:bc:c0:
66:51:02:b3:13:bb:a1:3f:f4:36:d5:ff:1f:ac:48:6c:a9:a1:
19:93:3d:7a:28:d7:d6:39:01:42:a5:40:c9:52:5c:98:98:c9:
92:83:50:9b:7e:1d:03:ad:2a:06:04:c5:04:c0:ad:9c:cc:27:
7f:8f:eb:63:3c:e4:7a:ed:da:ab:59:1e:66:21:33:7b:1c:7b:
c3:d2:62:bc:31:a1:b3:c9:b3:4a:a7:4e:d3:c6:14:3d:bb:a8:
68:b2:b7:72:ca:bc:ca:2e:a2:fc:55:a7:06:84:91:d2:54:40:
a0:15:ef:cc:1e:e2:32:74:30:74:c5:d5:36:43:77:bc:2a:05:
b3:9e:9c:90:7e:5d:51:47:3b:2c:58:f5:28:cb:c4:01:37:fa:
ae:17:d7:89:3e:da:cf:44:05:aa:5d:9c:70:a1:d4:d5:22:a9:
0b:c2:22:45:29:11:b8:f2:bd:21:96:da:7b:01:01:63:47:50:
ff:c1:5c:29:00:14:17:c7:8f:22:75:63:a9:4b:7d:d2:94:cc:
48:f9:80:d3:b8:bc:81:4c:d0:f6:46:95:72:da:e5:0b:1c:6d:
3a:ac:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:43 2025 by rpki-client