Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: v7ZZBVAMbJ9Otj91QSypMxAVUrv7TKk7njiQj2PkDQs=
Subject key identifier: B1:B1:A5:F1:CA:CF:96:FF:51:8C:86:9C:69:32:47:FF:E4:A4:FA:D3
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 0199239EE5F2F251C9230DC64CE076C58D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0656
Signing time: Sun 07 Sep 2025 10:00:40 +0000
Manifest this update: Sun 07 Sep 2025 10:00:40 +0000
Manifest next update: Mon 08 Sep 2025 10:00:40 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: hrhJFjzodCzmRt2fbrQS184TN8hGyec2UrwkfFGZyRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e5:f2:f2:51:c9:23:0d:c6:4c:e0:76:c5:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Sep 7 10:00:40 2025 GMT
Not After : Sep 8 10:00:40 2025 GMT
Subject: CN=b1b1a5f1cacf96ff518c869c693247ffe4a4fad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:3a:75:2a:b1:56:49:5e:99:bc:ab:6e:8c:
94:ab:40:c5:e1:15:1f:0a:05:ac:4c:75:30:ed:38:
5e:20:af:94:ea:53:dd:67:6c:5e:bc:88:32:22:f9:
7f:c7:03:ac:a0:be:bf:47:f7:e1:62:1c:ec:69:4f:
68:06:4e:b0:cd:39:96:74:94:ae:4b:d6:a0:bd:bd:
64:06:40:5f:15:66:44:8c:19:1a:63:35:32:05:a6:
1a:da:73:49:bd:a7:a5:22:13:f6:b9:6a:90:6c:be:
44:45:33:97:24:4f:ed:cd:fe:70:a4:a1:42:b2:86:
6d:2e:6e:ce:1b:fb:fa:6d:c6:8a:ee:45:4a:43:bd:
d3:5e:2a:5b:68:00:4d:bf:b0:7c:33:e9:71:52:b7:
16:dd:c8:19:59:33:37:47:8d:80:a7:a2:3d:7e:7d:
74:ea:21:9e:c8:91:fc:8c:f5:44:f4:28:64:4a:30:
c9:55:b1:21:2d:80:71:0f:b0:3e:94:c2:a1:b0:ec:
d5:30:14:73:10:b6:e4:a7:bf:fd:d9:53:ca:d0:6d:
8a:76:48:ba:5a:9c:52:b1:bf:8c:bf:c6:5b:b6:16:
8f:01:49:46:dc:b8:c4:d8:32:d1:78:2d:1d:0b:3b:
37:5b:89:bc:09:ea:29:72:f4:bc:82:ef:00:08:1a:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B1:A5:F1:CA:CF:96:FF:51:8C:86:9C:69:32:47:FF:E4:A4:FA:D3
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:76:92:73:6f:22:71:c6:76:ef:b3:12:21:bd:98:1d:b7:
f4:c3:e0:a9:fa:e6:19:5b:00:33:3c:18:ab:ce:6f:ac:fd:42:
fe:92:2b:eb:f9:1b:de:c5:16:3f:8d:29:9d:9c:e4:a3:31:1f:
95:58:8d:c4:5b:5a:ae:91:b4:c0:7e:cd:a3:be:ce:a4:94:9c:
c2:8e:d9:55:20:c9:83:3a:d1:80:da:93:67:16:db:76:33:4d:
b2:97:7d:a0:7c:b0:79:2e:47:06:05:fe:be:81:97:f6:c9:8b:
3f:2d:21:17:e1:f8:ae:23:96:d8:42:c3:4f:aa:07:b7:a5:7f:
3b:c5:38:cb:67:0d:6f:fc:c0:d1:f0:7a:48:2a:7d:4a:c9:1d:
8b:b4:74:f5:69:b7:2b:2c:08:06:28:bf:4d:11:ac:cb:a1:7f:
c7:22:b9:1a:aa:96:c9:6d:54:b8:a9:58:15:f6:8e:b3:52:84:
d2:b8:87:a5:98:df:33:7a:01:04:3e:fc:cb:15:37:af:96:28:
06:9a:07:b3:3c:64:b2:7c:c8:d6:a5:77:07:8f:b2:df:91:06:
a7:5b:80:11:06:46:51:45:f6:c6:b8:4f:0d:6e:61:84:2f:74:
e1:17:64:96:fb:e2:64:86:d5:e0:cf:b0:b7:ba:b8:72:12:4e:
ac:4c:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:28 2025 by rpki-client