
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: 4XFIRRb0cCawAKLaWX1T2CkMBbi/khXLZuKVZVN7XAM=
Subject key identifier: F8:D7:FB:CD:AD:2A:86:DE:FF:CB:DC:10:D0:DE:A3:A7:7C:29:B1:F1
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 0199221E5002DE06E733B3C63AB275A8C0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 1138
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: KFsKejBfgI0A11YNQAAaqzAp6nhNbzGQ5YYC7n2GDdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:50:02:de:06:e7:33:b3:c6:3a:b2:75:a8:c0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=f8d7fbcdad2a86deffcbdc10d0dea3a77c29b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:88:c0:d8:51:9f:d0:3d:79:5f:10:d9:7e:
95:4c:58:7c:08:89:19:a1:73:6e:67:44:eb:55:22:
27:9d:28:6f:ca:a9:6f:e7:ea:aa:d1:f8:6b:54:83:
24:a4:09:d6:6d:c8:8c:8c:cb:01:23:d6:5c:25:36:
3b:cd:41:b0:b5:a6:f1:a9:b6:97:96:e2:5f:30:c8:
41:9d:c8:b7:a3:41:36:73:32:e5:b1:4a:fd:e5:81:
32:52:5e:60:cb:1f:7e:b2:2f:68:05:03:e1:f9:e3:
a5:b6:16:25:2c:fa:c1:91:5f:53:98:3e:df:21:5c:
85:7b:7d:0d:80:24:00:02:77:03:8d:11:81:0c:b3:
bf:9b:fe:38:c4:45:6c:47:fa:4a:00:c1:fe:72:45:
b3:2d:ae:75:9d:f4:62:52:06:67:0b:c4:05:d9:7e:
e3:81:17:56:9e:b1:d9:05:8f:15:ed:2b:ab:2d:37:
ec:e1:6e:e2:37:dc:10:77:b3:66:d7:e9:bb:13:cd:
e3:b4:1a:7d:88:36:4a:7a:89:9a:fb:71:c4:33:89:
87:08:d4:c1:a1:6c:cf:97:38:57:bf:55:1b:50:f8:
5f:2b:6c:5f:95:3e:dd:71:b6:e4:0e:97:7f:eb:26:
a6:34:cc:84:4b:44:d1:63:94:f5:52:41:00:d8:4a:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:FB:CD:AD:2A:86:DE:FF:CB:DC:10:D0:DE:A3:A7:7C:29:B1:F1
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:27:ef:01:5d:9d:42:2e:13:eb:a7:1f:4c:3b:ad:cc:aa:a0:
b3:82:dd:93:cc:9b:72:d4:74:5e:ab:44:51:4b:e8:d0:37:8b:
0c:b6:69:a3:43:e8:a9:f1:d7:5b:0a:e3:50:5d:34:a0:db:79:
7a:5c:85:6b:52:aa:ce:c9:23:05:ae:a8:26:2c:20:01:62:40:
35:4d:53:f3:62:22:fa:27:4e:e5:19:0d:6f:e1:6f:b9:d0:84:
e0:e8:17:26:15:c0:6d:59:76:97:ac:c8:ce:81:4a:48:f5:ae:
7e:83:38:50:9a:61:30:db:5c:fa:17:12:f2:cf:c9:f4:d0:51:
93:cc:7b:42:e7:5f:33:19:2b:b5:c0:bc:8b:b0:3c:17:b1:f0:
48:a2:d3:37:d9:c0:f4:b7:b6:d4:7e:4d:7e:a9:55:a1:0d:ca:
36:f6:4b:c3:23:e9:9b:22:1e:ac:2d:06:f8:03:99:22:89:32:
0f:e5:71:6c:01:1e:eb:ab:22:e5:9e:b6:59:73:f6:6d:c3:56:
fc:71:a2:ca:82:34:6b:d1:f7:38:de:29:52:20:13:ad:e1:70:
26:98:df:22:eb:38:92:50:79:d2:23:49:fd:0b:74:83:a9:03:
ca:d8:df:3f:dd:0e:0c:7c:e3:fa:0a:d6:ae:3d:75:d2:e9:8d:
0b:97:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:02 2025 by rpki-client