
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: Al8v9kkmSLOQ0A9ZFmWoCDmxL50Yx1nx8BySEZy9K+Y=
Subject key identifier: 26:5E:E3:27:40:92:FB:38:4E:09:22:37:B0:98:0B:DB:73:32:4F:6E
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 01974B1F8A0D9F055936EFA744A2313C4F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 05CE
Signing time: Sat 07 Jun 2025 16:00:47 +0000
Manifest this update: Sat 07 Jun 2025 16:00:47 +0000
Manifest next update: Sun 08 Jun 2025 16:00:47 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: VaU/IJRDj/E1MZIpeTWrtk+9iHATROrlbBDDvi6puFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:8a:0d:9f:05:59:36:ef:a7:44:a2:31:3c:4f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jun 7 16:00:47 2025 GMT
Not After : Jun 8 16:00:47 2025 GMT
Subject: CN=265ee3274092fb384e092237b0980bdb73324f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:e3:55:31:9b:63:59:c2:15:5d:6b:f2:d6:
1c:89:67:2e:0b:65:af:39:fe:9e:23:2c:59:01:0d:
72:6a:09:ce:bc:dd:c1:22:51:f3:9d:66:e1:f5:62:
36:14:ac:0d:39:eb:9c:7d:b7:e3:1c:f2:c9:27:01:
98:89:fc:84:90:7f:cb:f5:e4:d2:80:25:00:48:35:
51:2f:4d:da:58:21:d7:81:cb:68:3b:aa:88:2e:ec:
ed:30:8c:92:01:01:fa:60:b7:f0:01:ed:4a:da:05:
ef:88:43:e1:09:a2:56:a5:00:96:9e:3b:15:f9:ec:
24:0d:ab:10:29:c9:e2:a8:a0:2e:ea:da:97:03:d9:
86:2d:81:7f:33:c5:4c:2e:53:60:6e:03:3c:20:fc:
bb:3b:8e:ce:18:f6:90:b9:bb:2b:b8:1f:e4:4d:83:
ae:f0:cc:71:86:2c:88:6b:47:19:c5:8f:6f:cd:9a:
61:76:ed:ba:9d:c7:fa:64:6e:33:10:88:0d:b4:e0:
92:c1:75:f6:80:9b:91:0b:62:8d:24:dd:5c:21:1c:
ce:28:32:3c:98:1c:db:a9:c8:0f:ec:8d:84:ed:0f:
8f:9c:2b:f7:61:29:6e:6a:56:11:98:d9:99:6b:dc:
8b:53:0b:30:b9:6f:bb:38:e9:69:61:8b:4e:5f:af:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:E3:27:40:92:FB:38:4E:09:22:37:B0:98:0B:DB:73:32:4F:6E
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:c4:be:18:35:31:3c:98:04:e5:30:5c:27:23:99:1b:6c:
6b:d7:9c:7c:08:fd:b2:c5:ec:15:8f:cc:f0:16:ec:25:13:a0:
44:7e:e5:02:81:f0:20:a0:96:73:e6:6b:6a:be:a5:47:ae:3c:
3e:e9:c7:84:ac:1e:79:13:17:12:56:6c:9c:50:ee:0a:ac:f2:
e2:f7:48:2e:d4:d6:5b:59:e7:32:2d:60:5a:75:90:d8:97:0e:
68:d0:93:28:0a:d7:6e:04:a8:e8:0f:78:9c:45:e5:9c:5f:f6:
b5:74:37:bc:1c:96:10:39:b2:32:e0:4d:aa:7e:8f:e3:47:81:
70:61:34:35:af:20:41:87:69:14:91:65:fe:73:95:86:4a:2e:
b4:fe:c3:68:0e:2f:1b:36:3a:52:38:b1:43:93:fb:5b:c7:a0:
b7:6e:ec:19:c7:91:a3:54:94:87:68:83:ce:d6:d3:cf:fc:18:
36:18:48:70:15:85:11:c2:db:22:bd:25:dd:5b:f4:19:99:de:
e6:c4:34:a7:eb:00:0a:05:54:d4:e2:6a:e3:cf:65:e6:5c:30:
40:a2:48:47:b3:38:ea:f5:5b:cb:53:f4:cc:c2:fc:28:37:b9:
c8:c1:47:21:57:98:ca:75:32:22:d3:b9:69:e0:16:a4:5f:e0:
9c:a3:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:30 2025 by rpki-client