Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
File: kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft (raw, json)
Hash identifier: v+PFanvpFnDGoRoJ6IS/cWcb4n/wwnj4osKX2WW4ZfA=
Subject key identifier: CB:71:C0:BE:78:45:5B:35:48:F7:F9:D7:FE:B2:30:0A:D4:6A:6F:6F
Authority key identifier: 93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
Certificate issuer: /CN=932692e8eb740235501c11080900858e332f1060
Certificate serial: 0197D4740B5975B5E813E66ECE1F92245106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
Manifest number: 46
Signing time: Fri 04 Jul 2025 08:01:04 +0000
Manifest this update: Fri 04 Jul 2025 08:01:04 +0000
Manifest next update: Sat 05 Jul 2025 08:01:04 +0000
Files and hashes: 1: kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl (hash: x709a8cXZoXe4qPLQCKUI/u8YYeurxkrtVx8nH2Sg7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:74:0b:59:75:b5:e8:13:e6:6e:ce:1f:92:24:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932692e8eb740235501c11080900858e332f1060
Validity
Not Before: Jul 4 08:01:04 2025 GMT
Not After : Jul 5 08:01:04 2025 GMT
Subject: CN=cb71c0be78455b3548f7f9d7feb2300ad46a6f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:6a:c6:4f:f3:36:6d:8d:ff:ad:3e:2a:01:
ae:0d:c4:5c:71:e3:f1:fc:41:ab:0c:92:03:80:6c:
9d:6e:27:9c:69:1d:2a:c9:17:ae:81:10:be:9c:c1:
96:bf:0e:78:c3:12:5f:88:6a:7c:80:ed:2c:34:b8:
e9:d3:37:9e:cf:25:5e:b0:9e:30:25:d0:0b:21:df:
d9:57:c5:1e:5e:50:7a:0a:2c:80:1b:12:fe:d9:f6:
23:3d:b3:97:10:c9:48:51:13:f5:00:e7:40:0f:60:
79:2c:7e:1c:64:73:cd:c8:ba:b0:b8:cb:ce:b1:de:
4f:b0:c6:0b:21:8b:32:84:b1:f7:97:e5:f6:f0:a5:
a9:d6:8c:d2:71:2d:ff:3f:b8:06:20:ee:f4:36:2a:
1c:bb:78:9c:82:6b:d7:2c:2f:0d:1d:34:6c:32:7c:
cd:6e:9d:f7:54:e0:08:3b:84:85:9c:d4:2b:44:af:
76:f5:1d:de:3d:17:e8:69:d4:b2:3d:fd:fe:30:bd:
c3:bb:6a:5f:d6:38:fa:c4:57:42:26:b8:13:d1:cb:
92:9c:2a:a8:db:07:c3:59:aa:0c:a3:7f:26:4f:6c:
c1:0b:bb:e1:8b:c5:24:60:85:5e:aa:20:a3:b4:dd:
c0:6b:4f:12:24:7f:5c:af:28:d4:61:f3:ce:76:70:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:C0:BE:78:45:5B:35:48:F7:F9:D7:FE:B2:30:0A:D4:6A:6F:6F
X509v3 Authority Key Identifier:
keyid:93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:70:cb:78:8f:b0:24:c3:15:e7:6d:06:f9:a0:ca:2d:84:
72:bc:42:7d:b9:b8:62:ee:0f:6d:7a:76:dd:0c:de:1a:68:0e:
0b:2a:be:5d:a0:31:d0:a0:1a:cd:3c:45:a3:ea:c1:c0:ac:1e:
71:ef:9f:4f:ad:fa:87:be:09:93:35:99:5b:a3:3f:63:45:9a:
c0:35:50:35:d2:7a:41:d4:42:55:bb:83:f4:cb:88:b8:2f:e0:
0c:18:10:3b:c2:9a:dd:d5:a0:7f:b0:65:cb:f9:a3:27:1c:0a:
0a:6e:1e:11:3e:e3:a0:57:da:10:e1:31:12:30:37:28:bf:75:
cf:79:8a:10:0c:be:9a:82:e7:f2:a7:23:2b:51:62:97:86:47:
b9:f0:97:de:5f:5a:a2:27:3b:5f:d0:0a:61:bc:b8:cc:51:14:
21:2a:43:33:38:64:08:4b:de:5e:ca:db:f9:f6:44:19:95:c2:
25:cc:3d:62:4e:46:a7:d7:4c:aa:d1:01:3f:75:40:d0:1a:5e:
cc:0e:bf:1b:36:ac:33:18:3b:f6:5a:aa:fe:3e:b3:e4:43:88:
78:e5:82:83:2b:7a:d3:01:e1:5f:44:12:d9:a9:c5:69:35:0b:
0e:46:ba:4a:a9:eb:dc:5d:d8:a9:7b:17:b4:95:f5:5f:e4:1c:
86:ff:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:52:06 2025 by rpki-client