Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: I2P5VKETRwnQxuYHw7IrJWDRz3Aot3PNlUMpgTLASIw=
Subject key identifier: A3:D1:2B:A8:72:AB:47:86:78:32:85:2D:8E:F9:7B:2D:A6:B3:CA:ED
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 01974BFB4AE15A6D2022C61FA6115D5B2496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 02A5
Signing time: Sat 07 Jun 2025 20:00:49 +0000
Manifest this update: Sat 07 Jun 2025 20:00:49 +0000
Manifest next update: Sun 08 Jun 2025 20:00:49 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: 3ck7nPdV0kbw/POpjcpc7hQ30NrRWX8NZVPmpf40voA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:4a:e1:5a:6d:20:22:c6:1f:a6:11:5d:5b:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Jun 7 20:00:49 2025 GMT
Not After : Jun 8 20:00:49 2025 GMT
Subject: CN=a3d12ba872ab47867832852d8ef97b2da6b3caed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e0:66:cf:ba:e3:2c:04:80:9d:0f:13:ba:8b:
e0:a2:b8:dc:90:19:d1:aa:75:02:40:3a:6c:0f:09:
16:ba:bb:ba:91:89:97:09:da:03:07:99:97:4e:86:
f3:d2:ca:a6:c5:ca:aa:60:6e:17:0c:1e:5e:ed:5d:
6a:a8:83:50:0b:27:af:d9:bb:b6:00:ee:1d:6a:7a:
18:b0:52:e1:78:73:01:40:9d:f7:01:9b:dd:d2:7e:
2b:df:61:c3:ab:78:29:ae:92:60:d9:09:47:9b:b2:
43:a7:b4:a1:8c:a5:06:c5:16:59:4e:07:57:a6:a2:
05:57:1f:4d:89:14:db:b1:16:f1:21:c1:18:be:49:
d5:82:4c:c4:12:50:91:38:4f:73:01:a1:b9:15:48:
29:69:ea:9f:5d:92:b0:77:20:cc:c0:fb:54:7d:87:
62:a6:66:cb:14:27:d2:16:7f:e5:e9:cd:db:0a:76:
29:b0:05:60:37:11:d1:41:42:9a:59:09:fa:f6:71:
5d:f6:6d:c3:dc:4b:e3:d6:ea:63:fe:c4:b3:bc:07:
d6:00:e8:6e:f8:a7:41:fe:3a:0f:e2:c5:69:65:c2:
76:ac:b8:e9:2e:17:c6:8e:bf:f7:20:d9:a8:33:b6:
5a:9c:75:a5:77:29:63:5f:22:aa:b2:a4:1d:68:07:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:2B:A8:72:AB:47:86:78:32:85:2D:8E:F9:7B:2D:A6:B3:CA:ED
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:ca:c1:37:6c:a2:a0:5d:61:78:68:74:9b:37:44:38:59:
85:d4:9c:fa:09:db:1d:cc:97:0a:af:ed:4c:07:6a:a6:57:30:
f1:bc:15:73:69:80:b3:8c:a0:fa:be:f1:fe:02:a1:fa:44:cb:
33:60:9d:cd:ee:6f:b0:15:c8:e5:6a:2f:89:a5:9a:e4:51:d2:
80:3b:11:13:2e:3e:c8:0e:b4:e6:63:08:d8:e0:ef:34:6b:67:
2a:c7:22:e3:51:a7:d0:5e:0f:46:d3:e3:a8:d1:22:73:14:05:
4a:45:2c:fb:7d:30:d3:34:56:42:d0:18:28:07:0c:56:13:32:
7e:85:4c:09:1d:7b:a3:f1:b2:e5:ea:ad:10:c2:a1:ad:2e:4c:
aa:f1:ee:03:52:ec:d4:f2:58:fb:c9:22:f8:b3:47:bb:5f:fe:
d6:7c:92:c6:2a:ac:f7:ce:59:5e:91:08:b1:ec:51:c5:09:3c:
fb:91:59:e9:17:15:fb:a5:f1:36:66:88:5a:dc:53:40:1e:1a:
2a:ad:93:47:aa:98:26:b4:b7:e2:51:73:7f:50:ed:c4:1c:2e:
f1:44:ab:90:fa:69:fd:db:9c:4a:5e:1e:b9:7c:22:88:ee:be:
34:ad:fc:90:a6:d7:4c:a3:74:9f:b7:b8:c6:a3:bc:c7:f8:36:
73:2c:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:05 2025 by rpki-client