Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: vGJxwAKquw21EmePg7xKL5x8FR27Hqs1GJBi/k+wqFo=
Subject key identifier: C1:C3:3C:DC:31:7A:05:DB:99:5F:53:BC:58:0E:EF:A4:E2:90:91:5E
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019748FA6EC36769B57C3F17345B5A75A644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0EBE
Signing time: Sat 07 Jun 2025 06:01:01 +0000
Manifest this update: Sat 07 Jun 2025 06:01:01 +0000
Manifest next update: Sun 08 Jun 2025 06:01:01 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: tgUSPwpnEw9+pP+EpcofN/WqfMjxNJSw21/Y0Mqp66U=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:6e:c3:67:69:b5:7c:3f:17:34:5b:5a:75:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Jun 7 06:01:01 2025 GMT
Not After : Jun 8 06:01:01 2025 GMT
Subject: CN=c1c33cdc317a05db995f53bc580eefa4e290915e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:7a:1a:7c:1d:f7:d7:eb:6a:0d:10:35:04:
27:3e:92:8c:1a:20:fb:b3:21:0d:05:59:36:00:fb:
8d:19:c9:1d:a7:cb:bc:18:3e:51:30:54:dd:f5:45:
86:75:3c:89:aa:8f:81:aa:2a:cf:d5:b8:b5:97:21:
72:8f:62:f0:b1:20:48:2c:dc:80:d7:96:18:dc:0e:
f4:66:be:c9:e2:c8:77:e6:28:42:1a:e1:a8:9b:3a:
20:5c:f9:ee:c5:8c:2b:82:e7:e6:75:4d:27:33:d7:
3a:80:83:96:e4:c8:f9:61:26:3a:ee:b8:13:57:a1:
36:73:9a:fe:c0:a6:04:e1:df:2d:40:09:30:ac:33:
26:c9:f7:aa:38:07:0f:83:69:7c:12:4a:eb:de:98:
8b:d7:83:7a:b6:88:00:3c:6d:e2:40:94:ca:11:ba:
5f:95:54:e9:64:b4:c8:78:f8:21:a8:39:66:97:a5:
31:d4:6f:0f:6e:37:73:84:11:b5:39:9f:e6:1d:20:
7c:f6:dc:d2:27:23:92:91:57:f6:77:43:6f:f0:1a:
86:ca:7d:af:58:ca:26:d1:dc:51:93:7c:24:53:66:
7a:c5:95:00:b1:e6:22:84:9e:0b:ff:17:71:1b:53:
d3:66:b0:05:76:08:79:d5:02:90:25:7f:2f:5e:5e:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:3C:DC:31:7A:05:DB:99:5F:53:BC:58:0E:EF:A4:E2:90:91:5E
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f2:2c:3b:f2:e1:32:dc:6f:ff:86:50:43:84:4c:33:09:16:
aa:b8:99:a5:dd:4b:cf:fc:50:20:79:86:38:51:77:d4:6c:0f:
e7:e1:d1:e4:ad:47:bc:6a:d0:e5:a8:1d:42:c3:30:27:c6:f1:
00:3d:bd:c4:9a:a8:0d:a8:19:c4:a4:0f:bb:c8:52:56:8a:f4:
b4:ed:73:50:44:57:2e:f2:1c:aa:c6:37:45:1f:12:fb:c3:39:
26:b2:02:0b:de:33:e0:c5:15:f7:28:d5:15:0a:61:6e:21:d2:
f3:79:c5:e5:d7:66:c9:c1:7d:e3:2a:36:f0:f6:ea:2c:e9:96:
9d:c9:f2:95:b9:f9:50:11:26:b3:ba:a2:9f:99:c8:21:b6:f8:
34:7c:41:9b:d7:c9:dc:c2:f6:99:82:e7:84:66:c6:52:fb:cf:
44:6c:9c:53:8b:40:07:dd:c2:bf:f4:97:e4:8d:d0:80:b6:a1:
b4:d8:90:8d:ba:69:ec:be:e0:c2:e7:ae:c1:99:a4:d3:36:66:
d8:d9:86:b7:21:9d:01:a0:91:46:f7:86:d4:a1:b0:c8:0c:03:
1b:7b:77:3f:22:c6:08:61:af:45:55:a9:1f:62:75:8e:a0:0a:
5b:b4:3f:18:2c:0f:9c:77:ec:9a:13:3c:cb:6a:8a:57:f6:b0:
bc:97:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:55 2025 by rpki-client