Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: oBXaFO/AdojUhLloRyrGTeb+gUuqKk3uAwMgu6tTHuA=
Subject key identifier: EF:49:08:B7:EC:76:39:2F:FD:40:44:6C:78:03:67:6A:19:3F:BA:D2
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 019748FA0D42CBA06D8C5A264904EB750F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 1043
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: c2EkB9tFePOVqfJPUDq8Jb6QYYGHU5ZLCSPzgJaYKI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0d:42:cb:a0:6d:8c:5a:26:49:04:eb:75:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=ef4908b7ec76392ffd40446c7803676a193fbad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:a2:29:c4:7b:8d:f2:a0:30:6a:17:ec:13:
7b:46:f1:88:f3:3c:0b:cd:3d:a3:2f:17:16:ea:93:
82:da:4e:52:78:d2:a7:80:dd:7b:ec:93:0a:dd:eb:
18:7e:b7:92:8c:82:eb:c3:42:5c:ce:58:87:25:ad:
84:57:53:1c:0e:7d:7e:27:22:62:86:3a:93:f8:b9:
e2:ac:aa:1a:68:ec:e2:bc:c5:72:36:c7:31:0d:6a:
80:ff:07:6d:69:7a:da:35:00:f0:52:48:80:4c:c8:
04:7e:e9:04:86:4c:eb:9b:d0:a8:25:8e:d8:aa:72:
92:ce:95:7d:e5:9a:83:c2:1d:03:da:52:b4:03:23:
0a:2c:89:aa:3a:70:c1:fc:81:06:be:fe:ee:b2:af:
5e:bd:01:33:e9:85:24:ae:a2:eb:d4:80:a0:db:6a:
26:28:e6:cb:a2:9f:61:fe:d4:98:5e:cd:c7:e1:ed:
bd:21:51:81:45:fc:a6:ab:8e:f4:eb:22:bb:72:ac:
9d:5e:a0:50:4d:26:fa:7c:fb:a4:29:69:19:65:d4:
81:df:ef:1f:3e:7b:1c:f7:f7:ad:c7:d1:38:91:18:
70:0e:74:da:6f:40:93:bc:39:71:d1:fc:e1:3e:8a:
8a:1e:a2:b6:54:79:1a:c3:65:31:77:c3:f2:bc:86:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:08:B7:EC:76:39:2F:FD:40:44:6C:78:03:67:6A:19:3F:BA:D2
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d9:79:e3:b3:95:24:38:6a:41:c1:b9:b5:53:79:07:e0:82:
44:5d:c7:7b:4d:d3:49:bf:0a:3b:54:6b:aa:73:7f:8d:ea:7d:
88:05:56:e8:92:68:55:59:23:f6:a2:d5:d4:81:4f:d6:94:3d:
75:33:56:fb:ee:7b:7d:f3:1d:92:9d:91:b7:9a:57:00:11:33:
09:b6:9a:5b:25:2e:a3:fd:f6:b6:a9:bc:50:9a:bd:a8:38:4e:
29:f8:71:19:f3:16:4c:06:4b:18:45:dc:fa:8b:bf:9e:e2:01:
33:4e:b8:58:e6:a5:42:fe:f4:af:e8:cf:c1:df:ff:8b:d4:cf:
1f:31:16:56:17:33:4e:6b:93:58:0f:ec:db:5e:54:4a:59:d0:
af:27:7e:f2:23:9e:0c:d3:aa:8a:38:ac:2e:40:86:80:a0:42:
76:f1:2c:c0:cb:5e:1f:01:67:5c:4a:bd:84:fb:dc:ae:4f:66:
83:00:91:12:26:e0:53:08:b4:3b:a3:0f:de:6e:40:37:55:1c:
f3:0b:0b:c9:c7:f1:ee:8f:f8:52:0b:a3:f2:59:4b:66:2d:c6:
22:72:74:dc:8e:86:0a:1e:1f:ce:75:3a:43:91:74:d8:ae:0a:
40:83:08:78:f2:69:12:a2:7f:8d:24:87:f6:8e:95:91:e3:e0:
79:b3:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:25:12 2025 by rpki-client