Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: 5uO1m7ZKC1r9lvz7jnp/1IEWbXUEKqyxzh/w4abQCWg=
Subject key identifier: D6:4B:14:7B:D5:8F:60:90:B6:7F:FA:EE:68:71:E3:84:02:3C:A7:FE
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 01974742B06343C8A1EF086FFB5D1C28297A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 036D
Signing time: Fri 06 Jun 2025 22:00:42 +0000
Manifest this update: Fri 06 Jun 2025 22:00:42 +0000
Manifest next update: Sat 07 Jun 2025 22:00:42 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: p//9+y3gmsIJmUqCBEt9VwZSYgbYihQDlcIxdIEqROA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b0:63:43:c8:a1:ef:08:6f:fb:5d:1c:28:29:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Jun 6 22:00:42 2025 GMT
Not After : Jun 7 22:00:42 2025 GMT
Subject: CN=d64b147bd58f6090b67ffaee6871e384023ca7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:fc:ea:87:f9:eb:a1:2c:09:3a:b8:7f:74:
c8:e5:d5:14:b1:82:1a:57:8c:3e:2a:68:99:f9:fe:
02:26:ae:8a:84:ac:ea:c9:f5:cf:b7:8e:1b:ea:8b:
a6:91:b1:d1:f7:cb:cb:25:bb:eb:12:45:29:62:b6:
02:42:5a:67:ed:83:cf:37:27:67:3e:b5:65:af:83:
e2:61:e0:46:f6:9d:f9:e7:ad:7d:47:fd:cd:f5:dc:
a7:5a:14:46:5d:ea:35:58:53:2e:ec:7c:86:65:4a:
99:1d:3f:4d:89:c1:ac:96:76:1f:75:35:e6:1a:2c:
b6:3e:37:d2:87:fd:56:2a:49:30:ed:dc:eb:ce:5b:
a9:a4:5f:15:ac:ba:97:b0:b9:bf:d6:18:c9:12:16:
47:09:4f:7b:b5:cf:30:27:91:00:ed:e2:d7:36:81:
f8:83:81:b4:73:ba:17:1a:de:50:0a:36:eb:03:27:
a9:fb:ef:4c:6c:62:04:95:c9:1c:84:b7:ae:f3:e2:
42:10:df:97:65:cf:ec:6a:42:7d:63:ec:20:25:dd:
58:14:be:d3:f6:63:70:2d:08:3e:be:2c:c2:39:5c:
78:99:bf:f2:b6:f4:e4:93:66:aa:30:01:67:1f:06:
78:67:8c:13:7d:f3:e5:63:5e:0c:a1:d7:b4:eb:c7:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4B:14:7B:D5:8F:60:90:B6:7F:FA:EE:68:71:E3:84:02:3C:A7:FE
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:23:81:3d:32:45:a2:44:c4:f4:97:e4:3e:20:c0:3e:38:
19:db:0c:49:eb:ac:7c:89:1d:6d:21:20:12:99:58:b9:38:c1:
77:67:d5:c3:b9:de:f7:e8:54:3f:2d:20:dd:d0:bb:9c:92:f3:
e7:41:6f:12:62:ea:bd:8a:1f:14:0a:7b:5d:d3:c3:78:36:01:
4b:9a:aa:32:dc:06:30:7c:b2:f4:e2:15:0d:b4:8c:8c:a8:3e:
ba:0a:2d:30:21:6f:d0:66:ee:a7:14:cf:85:d3:f4:9c:bb:56:
10:eb:97:8d:57:42:6b:92:49:3f:e5:29:26:e9:d8:fc:41:e0:
68:e5:16:e7:3c:08:49:f5:a2:b7:8b:71:b5:5e:97:19:f3:19:
76:cd:71:47:15:88:8d:22:d7:d8:11:77:7a:3e:cf:7f:aa:e7:
63:43:e1:b3:72:f9:14:54:54:95:9d:e9:66:26:1e:32:44:3b:
c2:c7:8c:a5:aa:05:4c:db:3d:17:6c:7e:44:00:d3:2b:a6:3f:
c6:47:c0:88:a3:fb:5a:28:93:0e:5e:03:32:aa:b5:24:4c:80:
db:d2:44:83:83:59:0c:fa:43:44:d9:5d:70:11:d7:a4:c5:d9:
9f:9e:2f:87:60:13:14:cb:67:4b:f4:33:e1:04:f9:12:23:11:
4d:18:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:21:57 2025 by rpki-client