Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier: CPhNTaCSturf7/Qoml526b9dmOHUiPMQZUvXPD6w7x4=
Subject key identifier: B7:9B:A7:C9:21:99:7C:86:14:09:D8:56:60:3A:E2:2B:7E:02:8F:37
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial: 01984589335E81D08920A0BAA61F79D00B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number: 07BF
Signing time: Sat 26 Jul 2025 07:01:16 +0000
Manifest this update: Sat 26 Jul 2025 07:01:16 +0000
Manifest next update: Sun 27 Jul 2025 07:01:16 +0000
Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: qpyusSw3G+Wr59KZU4E8MQd6Nt7mjVzO8Gx1mYMkEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:33:5e:81:d0:89:20:a0:ba:a6:1f:79:d0:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Validity
Not Before: Jul 26 07:01:16 2025 GMT
Not After : Jul 27 07:01:16 2025 GMT
Subject: CN=b79ba7c921997c861409d856603ae22b7e028f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:1c:4f:fe:d9:d6:4b:fa:28:6b:7f:11:84:
ec:64:6b:6c:6a:80:ed:77:f7:fa:54:96:11:72:33:
bf:75:c7:0a:0f:69:6b:dd:95:dd:e0:57:0a:f5:c5:
65:9f:61:69:cf:76:26:72:8e:07:da:d8:be:12:1f:
f3:2e:5b:ca:21:88:7a:94:29:9c:d1:e1:cb:d0:02:
8f:3f:67:50:64:0c:93:eb:54:f9:2c:1a:f3:cb:d4:
c9:3d:58:af:25:6e:79:4a:47:83:03:27:2b:31:da:
b6:72:e6:c9:ae:88:2e:37:0a:22:cd:58:e1:f7:91:
65:ff:17:d6:e6:76:df:06:77:b9:fd:df:d6:cf:d9:
ba:c8:f8:52:3c:fd:62:2b:e7:ed:fd:76:fe:8b:00:
43:92:7a:5e:7a:21:70:1e:41:e3:c2:e2:a1:33:ae:
d2:de:5f:a1:b3:cd:81:99:69:12:35:d0:7f:ee:d7:
d0:3d:9c:c9:bf:11:dc:c6:86:39:8d:11:b1:18:36:
17:3f:34:d5:05:65:20:5d:32:45:d3:c1:55:95:0b:
04:c1:81:ca:90:81:35:9f:b3:81:4f:7a:92:9e:9b:
20:5f:7b:e0:72:c9:8e:83:13:67:0b:dd:10:09:b0:
3d:9a:a1:3e:5c:e1:f5:61:8b:53:e7:79:35:d0:ed:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:A7:C9:21:99:7C:86:14:09:D8:56:60:3A:E2:2B:7E:02:8F:37
X509v3 Authority Key Identifier:
keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:ae:1b:8c:5f:8a:34:ca:f9:72:8e:f7:e9:74:87:fd:90:
ff:b8:be:fb:bc:b5:86:59:cb:cc:26:62:02:91:d7:68:6c:74:
ee:d5:8d:8a:a7:12:92:02:09:41:ce:ed:7e:33:71:b9:67:8c:
1f:91:02:33:22:cd:04:ac:c3:2c:93:b3:49:d9:ec:50:b8:20:
d3:e8:2d:ee:fb:7f:e4:cc:c7:72:0e:92:57:bd:d9:d0:e2:8d:
72:77:79:e2:c7:6d:bf:63:b6:ea:3e:02:22:65:ee:b4:61:19:
44:d7:89:40:41:ef:e9:d9:54:ad:05:a7:ba:10:36:68:8b:58:
8b:43:8d:0f:05:86:f0:b2:d2:7c:34:f5:5d:1d:7a:05:02:00:
44:c0:d7:bf:49:2c:5d:d4:9d:cb:2c:31:e7:90:4b:d2:46:62:
96:6b:d8:97:94:43:f5:86:4d:c4:e5:1e:72:ff:eb:16:52:2f:
6f:fa:30:37:c6:be:e2:fc:bb:9e:c0:7b:9b:ac:df:bd:ff:7d:
40:c7:d0:fe:cc:a2:d6:fc:34:20:09:3e:e4:ea:48:e8:6f:27:
7e:01:75:db:5b:fe:7c:e6:95:af:85:2f:2a:81:b6:cc:37:23:
d0:32:0d:b9:88:bf:52:8d:f9:e4:ee:50:e6:90:1d:95:01:10:
33:e5:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:56 2025 by rpki-client