Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
File: kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft (raw, json)
Hash identifier: sO7CJLMsOTsGnOa975vswwzMKGcNX5q86JBPzRIjWf4=
Subject key identifier: B0:33:AB:58:03:58:91:65:21:F0:2D:51:26:0E:7F:14:55:87:69:93
Authority key identifier: 93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
Certificate issuer: /CN=932692e8eb740235501c11080900858e332f1060
Certificate serial: 01987C7721FF09A2B0889641AE34A8E24524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
Manifest number: 9D
Signing time: Tue 05 Aug 2025 23:00:38 +0000
Manifest this update: Tue 05 Aug 2025 23:00:38 +0000
Manifest next update: Wed 06 Aug 2025 23:00:38 +0000
Files and hashes: 1: kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl (hash: 1d9enrMFczOBSPGEIoi6lAf/HRkqH+TdyCaIOIaJbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:21:ff:09:a2:b0:88:96:41:ae:34:a8:e2:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932692e8eb740235501c11080900858e332f1060
Validity
Not Before: Aug 5 23:00:38 2025 GMT
Not After : Aug 6 23:00:38 2025 GMT
Subject: CN=b033ab580358916521f02d51260e7f1455876993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:ec:2e:04:0e:e0:a7:50:8f:79:46:6f:be:
b1:36:0e:fa:44:a4:0d:66:28:e6:80:98:e6:ca:6b:
6d:eb:6a:b4:8e:71:3f:38:87:d2:a4:a2:52:37:7e:
56:84:4b:3d:25:1e:9f:03:3b:c5:1d:71:c4:7e:0f:
51:c8:72:3b:93:d4:78:ce:2b:a8:60:83:3a:18:cc:
70:ee:14:ae:0b:98:f9:08:0b:40:f9:19:80:66:e5:
7b:e9:5c:2e:12:d1:27:7b:00:ad:9d:90:7e:cf:dd:
79:f7:11:a7:64:e9:9d:da:0e:65:40:f3:3d:55:84:
b7:46:26:bc:3d:da:a4:a1:0e:2a:ac:59:88:6e:d6:
12:0c:c7:5d:66:0d:ba:a7:ff:63:da:0c:0b:d0:30:
bf:8b:99:db:fc:c8:0a:df:30:43:af:6a:c5:26:04:
9b:e9:08:4a:61:1c:f2:c9:7c:ca:af:5a:88:21:85:
b1:11:a8:06:aa:32:53:ba:db:6e:b8:9c:e9:a0:f1:
8d:5c:03:21:66:60:8e:70:53:fc:04:8c:a7:a9:26:
6a:d1:62:ef:ef:e3:b6:3d:75:4c:b2:d3:b0:d8:a8:
50:1d:8b:65:28:16:16:d7:16:c8:21:dc:73:3b:17:
8d:01:eb:e4:2d:12:3f:74:01:f2:ef:dd:73:db:29:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:AB:58:03:58:91:65:21:F0:2D:51:26:0E:7F:14:55:87:69:93
X509v3 Authority Key Identifier:
keyid:93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:56:3d:83:80:ef:69:ff:c0:34:e2:af:ef:e4:1b:01:8e:
7e:fa:41:21:e1:97:b3:71:45:af:c5:35:75:61:58:07:ef:60:
c2:52:d4:7a:3a:57:54:20:d8:ce:ec:e9:7b:c8:35:a4:bc:11:
eb:0f:30:4f:2f:b2:82:cb:a5:31:ea:a4:d4:a5:32:de:86:27:
f9:fc:ff:4d:0c:15:49:cc:e8:d2:8e:6c:92:f3:d8:7b:b9:35:
29:ee:55:55:ff:c3:07:f1:aa:29:ea:c3:1b:6d:1c:ed:2c:49:
d3:62:21:1e:05:4f:75:f2:4c:3e:44:3f:db:4c:f6:58:4a:15:
57:73:df:16:75:b1:34:55:1f:eb:ac:06:3b:40:cc:8d:88:fc:
b8:1f:3e:8d:84:f8:51:f9:6a:d0:ff:36:33:92:b8:14:ff:7f:
5a:f2:c3:48:a2:d3:a1:b2:e1:73:c5:96:db:fa:96:44:ec:7a:
b9:57:ab:1f:33:51:45:30:5d:ea:4d:9a:a0:97:4f:76:51:dc:
bc:26:a7:c2:d9:31:25:55:f5:93:f0:54:8c:22:c9:9d:a5:5a:
f3:8d:e3:e3:3b:eb:5d:30:bd:56:fb:48:b4:da:9e:d7:0a:7a:
d7:a3:1d:6a:49:d4:85:f4:3f:f4:95:b5:f5:32:41:76:db:ee:
82:38:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:40 2025 by rpki-client