Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: j/pqieQJtStNq0A2OHT4Q0cpmfhNVkzGqNVa2e6NKaI=
Subject key identifier: 40:ED:DC:37:9E:FE:C5:A6:69:55:3C:26:08:6F:C4:7C:07:13:62:6A
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 019749D59D9A18290D5AD1B3C9A48837F30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0D94
Signing time: Sat 07 Jun 2025 10:00:25 +0000
Manifest this update: Sat 07 Jun 2025 10:00:25 +0000
Manifest next update: Sun 08 Jun 2025 10:00:25 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: CG0nlxmksWmLPzUOJSA5E18AhElyvGwBRHB//GqZvJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9d:9a:18:29:0d:5a:d1:b3:c9:a4:88:37:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Jun 7 10:00:25 2025 GMT
Not After : Jun 8 10:00:25 2025 GMT
Subject: CN=40eddc379efec5a669553c26086fc47c0713626a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:26:07:f7:ae:9c:c0:84:33:c9:71:9c:eb:
59:09:2f:ab:0d:39:09:53:cc:e9:85:17:4c:d2:33:
1f:66:90:62:6c:0c:de:a9:de:de:4f:3c:0b:56:0c:
e6:0c:52:eb:23:b1:d6:2a:dc:1f:d2:c1:1b:82:57:
68:d0:2d:6c:9c:9a:ff:61:96:48:83:b0:6f:47:7b:
2e:ff:55:0b:9e:a6:5e:65:0d:b9:f1:9c:5a:d6:9b:
db:20:8b:75:1a:a9:44:9e:c9:fa:d9:68:4c:23:f3:
23:02:6d:22:33:64:d5:ba:3a:04:23:74:3c:ec:43:
92:19:d5:9d:75:91:3b:ad:cd:6b:1d:11:a2:02:12:
d1:67:8f:7d:d8:4e:39:e0:92:7f:21:68:b0:5c:21:
75:cb:19:1f:55:99:bd:76:3a:e0:5b:86:5c:10:0b:
6a:34:49:c1:f5:45:03:e3:20:cb:ca:17:be:99:2b:
4e:4d:45:85:cb:b5:76:17:68:63:a8:f5:d0:ac:0d:
81:34:ab:a0:be:0d:a3:f2:03:c5:bc:c5:cd:56:f0:
15:4b:2f:f2:eb:c9:9c:8d:92:03:74:07:45:d6:17:
6e:20:7d:b4:77:cc:3a:77:8f:e4:2d:4c:d8:cd:dc:
18:10:69:aa:fa:22:80:ab:a9:0c:36:85:0e:50:9b:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:DC:37:9E:FE:C5:A6:69:55:3C:26:08:6F:C4:7C:07:13:62:6A
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:0c:7a:39:77:5e:c7:cb:ed:6c:a9:5f:6b:02:bd:59:dc:
04:e7:f5:e4:c3:5a:7e:21:31:a6:4d:2f:28:c0:73:af:37:ce:
aa:cb:a1:1c:ee:73:29:d6:82:29:6a:87:a9:64:b9:94:23:f6:
63:70:be:b0:e9:b6:28:20:cc:da:ce:85:16:e6:b7:4d:c6:72:
da:5d:a1:ca:74:3b:1c:8d:b7:30:38:8f:93:b5:cc:78:d3:a7:
58:90:8e:7a:fe:b3:0b:51:32:7e:28:ba:8a:5a:96:19:94:ec:
67:dc:a7:bb:39:e2:7b:c5:41:36:e9:5c:32:8d:79:92:35:25:
8c:af:bf:9d:61:1e:76:a6:28:11:76:2f:2a:87:de:67:4c:5e:
20:86:ca:2e:1e:02:5f:b8:36:b6:ad:08:b3:5e:1b:8a:e3:50:
0a:7d:10:7f:c4:13:0e:ec:72:74:b9:c7:f2:9e:1f:85:81:2f:
1d:77:65:79:92:3d:f6:80:13:97:c9:35:10:3d:5f:2f:f5:49:
44:c6:0a:60:76:76:97:bd:1d:0c:92:0b:5b:e6:ca:eb:d3:86:
87:16:2a:a2:f4:29:51:d8:37:58:c0:97:2c:4d:ba:25:e4:56:
31:86:f5:02:db:d9:70:7e:7d:e1:a5:a0:bd:31:dd:75:fe:ce:
74:51:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:30 2025 by rpki-client