
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: 1bjlWm1x2oLK213BzxxDCokPOA0nG1StxezLbJVttsk=
Subject key identifier: 09:EF:C7:4E:1E:5F:0A:75:60:AC:7A:62:A7:3D:8F:21:FF:8C:B8:01
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 0198880D534C60301A9DADEAD2E917695ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 1125
Signing time: Fri 08 Aug 2025 05:00:31 +0000
Manifest this update: Fri 08 Aug 2025 05:00:31 +0000
Manifest next update: Sat 09 Aug 2025 05:00:31 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: Fqa2wkuY+/l+xV95nFSoPDixlzObpvXRJahxwCrAG9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:53:4c:60:30:1a:9d:ad:ea:d2:e9:17:69:5a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Aug 8 05:00:31 2025 GMT
Not After : Aug 9 05:00:31 2025 GMT
Subject: CN=09efc74e1e5f0a7560ac7a62a73d8f21ff8cb801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:42:3c:57:8b:2b:04:b1:18:32:ee:63:88:
ac:03:1a:a6:8e:16:2d:01:6b:b1:8f:2d:11:16:de:
fd:6e:c6:f5:c0:91:d4:00:71:d3:6b:5c:08:55:a6:
de:5b:6e:03:d7:d1:dd:d1:6f:c2:f9:00:ae:67:7b:
85:10:9d:39:e2:e3:80:e5:cc:d8:6a:64:97:98:d3:
02:b0:0e:bc:c3:e4:32:cb:f2:09:02:c5:61:bd:98:
e0:bf:cf:fe:7c:12:e9:d5:e6:9e:00:70:d7:27:8d:
76:87:c1:38:d7:09:c5:8f:32:32:ef:39:91:e4:f1:
09:80:a9:56:ab:fd:f4:96:7d:ee:ce:f7:09:51:aa:
76:c8:15:d5:cf:b3:4a:25:32:a3:83:7c:07:b7:17:
c7:2a:d0:f8:6f:27:ba:04:38:be:11:e1:d7:17:c9:
3c:f9:29:8b:bb:f1:90:6b:99:41:48:bb:48:f6:e3:
0c:60:1d:04:30:5b:35:be:41:c1:91:2a:5b:50:63:
83:23:2f:e0:26:39:27:09:98:42:50:12:42:91:01:
cd:73:38:92:83:37:e9:13:92:fc:2b:2f:5a:ea:36:
76:93:74:b2:62:20:41:9e:da:87:01:70:9e:f1:bb:
13:d1:18:7c:c8:40:68:68:cd:5e:f6:49:b3:c3:2a:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:C7:4E:1E:5F:0A:75:60:AC:7A:62:A7:3D:8F:21:FF:8C:B8:01
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fb:91:f2:99:41:ba:9e:09:8d:48:ae:6e:55:8d:fc:dd:c6:
5b:03:ef:05:1c:a6:8b:2f:5a:44:ed:d6:b6:43:7a:29:9e:46:
6c:a1:ed:c3:e8:68:ae:ea:2e:44:b4:da:ba:c5:f7:16:cc:a0:
44:42:2d:72:24:cf:ba:bc:96:24:e4:1f:8d:f0:8b:af:71:0d:
3e:ef:85:16:78:4b:de:b3:b4:bb:8f:af:62:f4:e4:94:c1:90:
88:bf:a2:fd:39:b7:68:2e:24:69:c7:16:64:79:3e:82:33:ea:
98:57:ae:b0:05:8c:9c:90:04:8f:f2:a4:84:ee:cc:6a:97:d3:
f3:b3:b4:1f:c2:a0:da:64:09:e6:4a:13:27:1d:f0:53:4f:d8:
09:c8:1a:e8:c5:b1:44:50:7b:81:aa:8a:98:c1:37:91:4e:40:
96:40:b9:28:24:89:61:10:36:42:c0:92:d4:4c:33:32:bb:5f:
7b:70:4e:bb:50:a9:7b:96:5c:78:3f:f7:66:1b:7c:f6:e2:e4:
17:89:25:8c:f9:4c:a9:7b:ab:59:4d:ef:a6:19:95:9d:c6:6f:
fb:30:b3:98:f3:d0:e9:0d:a5:81:0f:08:1a:32:fd:10:fe:84:
a2:9d:c7:9a:8d:1b:82:34:67:5b:34:22:fe:a9:a2:7c:bf:31:
97:72:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:51 2025 by rpki-client