Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: poSRFcryedR+2lght5dKdjl5Ny9bID33VoU5//Rmp5Q=
Subject key identifier: 86:6B:A4:56:B7:92:21:05:C0:8C:CC:00:EF:A3:35:9D:E7:48:CB:04
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 01974C9FDA8F66CBE10CC5BEB728400B5821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 024A
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 1P1r8SuXxr4K8g0dUGYEhau04q2dB4tRS0ATtbWBCeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:da:8f:66:cb:e1:0c:c5:be:b7:28:40:0b:58:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=866ba456b7922105c08ccc00efa3359de748cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:31:1e:ff:22:a3:ae:45:4b:c3:fa:73:34:
6a:a2:99:a5:49:15:1c:fe:8c:1c:b2:55:25:82:04:
a2:f3:71:b7:fd:20:91:07:4a:81:26:f3:34:e6:e0:
92:1c:b2:07:f3:f1:18:74:04:cd:31:56:64:5d:a4:
ee:4e:c1:c2:03:56:2b:d4:6b:a8:bc:85:06:65:0a:
48:78:79:42:e5:f8:68:fb:58:d2:1c:13:ab:03:7d:
7e:9d:80:22:d6:a1:1d:d8:71:ed:8b:fe:42:ed:e2:
b3:20:f6:cd:d6:7b:af:80:b2:92:d3:a8:77:2c:09:
dc:bd:e7:71:5c:78:d7:50:7d:fc:6f:6f:fa:74:91:
c7:98:92:0e:4d:9f:4d:ea:36:cb:6b:42:ca:08:b3:
ca:bc:90:fd:85:e1:ae:68:d0:39:56:d3:cc:27:d3:
69:f7:88:54:36:a2:7d:f2:a2:ce:f7:d4:4e:90:2e:
3b:b4:53:a3:05:79:1a:7a:d5:af:3f:ec:6b:29:bf:
cb:ab:df:64:9c:e1:e9:83:8e:de:98:ff:55:13:e3:
1d:f6:fb:ab:42:f5:f2:63:c1:cb:82:8d:34:d9:cc:
c6:11:72:52:a6:36:1b:ec:ec:49:53:03:83:99:77:
c6:e2:6a:4d:bb:3e:92:bf:9e:51:ad:f0:07:ca:cd:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:A4:56:B7:92:21:05:C0:8C:CC:00:EF:A3:35:9D:E7:48:CB:04
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a7:f5:65:29:9f:fa:ff:ee:99:d4:d6:0d:93:e9:82:1e:44:
3a:5e:5f:bc:24:8f:e6:0f:18:bc:e8:d6:b0:1e:4d:6c:63:16:
7e:78:17:a1:02:da:e7:c7:78:d8:6b:f2:57:5f:ed:4c:04:50:
f5:ee:20:7e:6e:7c:eb:10:91:9f:0b:8d:30:2d:21:3d:a9:c9:
08:ec:c2:1d:7c:3f:f9:ae:2c:73:8e:61:50:74:6d:10:4a:99:
b0:5e:bd:78:9e:fa:34:d2:b9:e9:60:ad:af:56:c1:c3:8b:44:
c5:fa:8e:83:e1:e6:38:e9:80:a1:e6:a7:5b:48:64:6e:8c:46:
4e:df:12:95:b0:90:0b:68:79:29:39:78:02:f0:ad:83:70:28:
f1:8c:e6:f9:f9:3b:04:7c:86:f6:fd:82:91:e8:b9:12:a0:ac:
49:01:94:8e:f6:33:f0:fe:61:06:54:d6:bf:a4:87:53:33:3b:
ac:e6:b5:44:77:90:aa:08:3d:37:d7:a4:eb:24:f2:b1:8c:95:
63:e5:1a:c9:b2:36:bf:ed:49:96:f6:fb:a0:bf:43:40:98:0f:
be:35:1f:c5:21:0b:f3:e9:f1:32:b1:fb:fd:61:a2:1c:67:5f:
d3:d5:c0:f2:ae:4c:56:b9:1a:b8:40:c9:04:05:1b:b4:26:d7:
2e:74:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:31:42 2025 by rpki-client