
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: dRUQ7h7CCQ3/FW5r1Vk89OQ1t8z8vun8CKRAsje8wzA=
Subject key identifier: 2B:4B:D8:1F:13:19:4C:9A:F7:1E:32:B8:9F:53:27:B1:18:8F:A6:5E
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 0198499C090AE1E902138DCB7F49CAFFAE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: EC
Signing time: Sun 27 Jul 2025 02:00:19 +0000
Manifest this update: Sun 27 Jul 2025 02:00:19 +0000
Manifest next update: Mon 28 Jul 2025 02:00:19 +0000
Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=)
2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: +B9DHrSpADL/Fe/9vU0klWDC3oHNbxkrhafwkBCwO6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:09:0a:e1:e9:02:13:8d:cb:7f:49:ca:ff:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Jul 27 02:00:19 2025 GMT
Not After : Jul 28 02:00:19 2025 GMT
Subject: CN=2b4bd81f13194c9af71e32b89f5327b1188fa65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:bc:82:99:db:ae:53:d9:1b:58:85:31:04:
3b:4e:9e:95:f2:23:fb:3f:6d:b1:fc:3c:98:a5:cf:
4c:f4:ae:a0:ac:e0:4f:96:a2:6a:b4:59:53:63:a5:
bc:5c:36:92:96:91:78:8f:20:21:64:5b:7d:ba:3e:
5c:73:05:6f:24:a6:5e:5a:a9:36:af:0f:0e:3e:01:
6c:a6:b4:1e:a0:4c:38:a7:0d:b3:8c:37:73:3f:fa:
b2:96:21:07:e1:05:ff:4a:3d:55:44:e2:5c:a7:32:
a1:5b:01:29:75:a2:b1:39:2a:50:ef:6f:c6:83:08:
fd:86:3f:19:61:77:54:95:8d:83:f8:5a:8f:c9:7e:
9b:3d:e9:cd:6a:6b:ca:18:2c:82:b4:6b:2c:56:a6:
5b:0f:8b:1b:87:9b:57:43:aa:22:28:88:25:cd:24:
1a:8d:29:d6:a2:69:2c:64:3b:78:d9:8b:1a:f0:fb:
6a:0d:65:1b:d4:53:38:18:da:3c:3c:3e:5e:54:da:
64:9f:55:67:76:74:5f:67:aa:3b:27:b9:a5:10:17:
3b:2a:be:19:5a:0b:14:14:69:05:f2:d6:99:ac:04:
b8:d0:b8:ef:90:dd:d6:2e:4c:12:47:20:0b:ed:ff:
b3:ca:a3:43:0f:1e:79:b3:a1:46:0b:40:55:ad:9c:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:D8:1F:13:19:4C:9A:F7:1E:32:B8:9F:53:27:B1:18:8F:A6:5E
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:66:ae:0b:1c:e5:5a:52:9c:92:78:d8:e4:8c:a7:17:47:46:
1c:6d:14:d8:63:29:e1:76:81:e6:e8:70:03:08:fc:ed:8d:4b:
14:70:0c:c0:0b:90:7b:ad:87:ba:71:3b:cd:44:44:14:95:64:
20:a2:d1:d6:a7:6c:22:e8:41:33:01:24:e5:5e:fe:ba:07:44:
79:b9:ea:fb:48:98:03:5d:9e:8b:f4:3c:7f:4f:cf:3d:3c:9a:
af:47:c1:c7:be:21:9c:c5:4e:e0:4b:27:9c:d9:77:57:73:a6:
ec:3e:b6:ae:d5:d2:a9:4c:37:44:2d:a2:44:f8:ad:ef:80:c0:
8d:94:4b:f4:22:7a:cd:57:33:cc:e9:eb:2a:dc:cb:2f:bd:d8:
49:ac:53:93:ce:11:0f:f3:bd:d1:f6:58:19:d3:0c:4e:2d:cb:
58:60:06:cb:7b:47:87:93:80:5f:26:e7:29:76:66:d8:81:14:
cd:38:77:81:1d:3e:0a:3a:8a:1e:08:75:0a:53:fe:8f:bf:e9:
cc:4f:a6:f2:56:e0:e4:d8:38:35:f0:42:2d:50:60:13:80:ad:
2a:d5:5b:fb:36:8f:e6:31:a3:d6:65:32:87:7c:e4:49:ea:f3:
f7:01:6a:22:33:ca:0b:fc:24:e7:43:3e:01:72:6b:91:24:a3:
9c:a3:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:09 2025 by rpki-client