Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: 7+scCeqCxk71QWjvpn4iJkJYEM6/vzxXe5nU6Yg0TAI=
Subject key identifier: B6:A6:65:16:0D:6D:C9:05:F0:AB:09:29:38:E3:D6:4D:DC:4A:A1:A5
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01984965E9AD1A168D664885AB59193833DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 0410
Signing time: Sun 27 Jul 2025 01:01:12 +0000
Manifest this update: Sun 27 Jul 2025 01:01:12 +0000
Manifest next update: Mon 28 Jul 2025 01:01:12 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: RFRmnzPvxxwSTQ7P0MmRir+mq8bgrDe9RxF+pK/oHF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e9:ad:1a:16:8d:66:48:85:ab:59:19:38:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Jul 27 01:01:12 2025 GMT
Not After : Jul 28 01:01:12 2025 GMT
Subject: CN=b6a665160d6dc905f0ab092938e3d64ddc4aa1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:46:10:22:51:87:1b:d1:7b:78:f5:a1:75:
ba:43:6e:4c:a6:4a:bf:d5:08:a0:21:a8:82:80:83:
1b:d2:31:97:a2:6c:a5:10:71:30:25:e6:ab:73:a6:
09:42:c7:32:66:78:60:28:18:8b:f1:3d:79:22:c9:
50:0e:9a:d9:92:c2:3e:83:88:58:ba:65:c1:84:b1:
94:ef:52:2e:f1:08:22:91:c1:aa:00:cc:57:fd:05:
6b:bf:65:5e:ec:53:0a:eb:86:03:de:64:78:ec:e3:
f9:35:6a:8d:99:75:24:b8:54:b4:b4:19:34:ed:e9:
6d:ea:30:bf:a4:8a:33:65:63:3d:12:0e:b1:f2:cf:
bd:1b:ab:0e:17:ff:d4:da:b1:11:1e:b8:9a:c2:0a:
c0:e5:6a:7b:b4:da:94:fd:d6:2b:b0:9e:30:9a:a0:
87:cd:0a:8d:b4:6f:f7:7e:d1:f1:a3:4f:53:52:47:
9f:00:94:f5:89:55:eb:a9:7f:bb:c7:b8:70:3b:c7:
d7:e9:4a:c8:34:3c:41:cb:45:1d:32:38:56:1c:c2:
9d:2a:aa:cb:a0:71:37:c3:70:ec:d6:a2:c8:a6:f7:
89:35:83:5a:27:2e:71:18:86:c3:ae:0b:13:b2:dc:
0f:9a:94:0f:31:16:5b:db:6e:0c:61:e8:42:3a:be:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:65:16:0D:6D:C9:05:F0:AB:09:29:38:E3:D6:4D:DC:4A:A1:A5
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:79:c5:6d:d3:73:97:61:34:db:56:28:d0:05:f1:a8:65:
ac:7c:f5:19:8a:79:ce:02:5c:30:19:01:85:99:7e:a7:ad:95:
dc:81:a9:06:f7:b8:9c:c5:2e:58:5d:6c:6b:9c:00:aa:02:0e:
88:bf:02:80:35:f5:fa:af:62:2b:3a:51:46:3d:cb:cb:8e:1c:
c2:47:fa:89:c8:60:ef:02:3b:a3:ae:36:a9:5e:ae:38:db:39:
5e:e2:5d:5b:63:17:09:39:c7:60:e5:2a:4e:0e:0f:a1:7a:25:
63:66:6b:20:68:5a:03:3b:9f:45:16:9a:98:e6:2e:ef:4e:c6:
ed:7c:18:02:8b:13:b0:41:17:c7:6c:5a:4b:a2:c9:95:45:fe:
e7:98:32:3f:47:63:36:92:9d:18:85:b2:e3:dd:3a:0e:d4:b3:
f3:b4:5f:fd:74:b6:17:ac:fc:88:d8:21:4d:e7:29:ce:e1:92:
9b:ba:dc:78:de:dd:16:38:5b:28:86:ed:21:3f:40:a4:35:15:
dc:08:35:64:c7:84:ad:15:a6:32:19:7d:d9:d5:ba:2d:08:bd:
93:5f:32:5a:84:6c:24:4f:ca:e8:58:23:61:31:b5:22:78:ab:
3b:60:fd:8a:4a:78:c4:7c:6e:18:d0:20:d6:ed:dc:a5:f9:ed:
3c:23:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:15:50 2025 by rpki-client