Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: mDachFgkHHiaRZzZKGFy2PZBYCCCeC8g9H7yy6AAEZI=
Subject key identifier: 23:8C:13:CB:55:EE:9D:8A:56:06:F7:E0:36:8D:9D:89:96:FB:40:95
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 01987261CEDB403BAF9BEF9D15409DC4BA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0F58
Signing time: Mon 04 Aug 2025 00:01:09 +0000
Manifest this update: Mon 04 Aug 2025 00:01:09 +0000
Manifest next update: Tue 05 Aug 2025 00:01:09 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: /NkaGQX5PlSQLenxQMXMbU0zmKPLCeLFaqS633uYeqk=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:ce:db:40:3b:af:9b:ef:9d:15:40:9d:c4:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Aug 4 00:01:09 2025 GMT
Not After : Aug 5 00:01:09 2025 GMT
Subject: CN=238c13cb55ee9d8a5606f7e0368d9d8996fb4095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:73:70:97:ee:6e:8c:89:9b:16:a8:f4:8c:
dd:e9:97:6b:ec:d1:5f:f3:5e:35:c3:a0:08:5b:5c:
a0:0b:70:6b:49:d3:3c:f7:5d:0d:09:56:d3:4f:ff:
50:19:e4:3a:d3:79:62:22:b3:1b:a5:cf:4b:58:96:
7d:1b:7d:ac:c3:bb:78:cf:af:44:41:f6:dc:db:11:
91:ef:53:a4:f6:a6:17:61:45:b3:b6:df:81:54:c9:
bc:b3:60:c1:96:96:00:2b:25:88:55:ef:e6:40:5f:
00:7b:ae:38:82:ff:dc:cd:8f:25:da:53:52:ab:e3:
af:c6:f8:e0:17:9e:6c:43:ec:c2:20:17:d0:83:7b:
70:58:6d:29:a9:55:91:84:0c:a7:90:d4:ea:4e:20:
93:2d:4f:1d:00:a5:e5:f9:cf:02:a9:0e:41:70:59:
32:ca:e3:62:2d:2d:7c:92:52:b4:b4:d1:eb:9b:21:
37:a5:72:8d:7a:e8:50:23:a7:5e:b4:a7:7d:38:db:
c7:d6:1b:70:e1:9e:50:f7:4e:e1:96:9c:2b:3b:d6:
ec:2f:92:d6:c0:52:b7:15:52:18:f7:6b:5e:2c:11:
73:ca:ce:3e:dd:ce:6c:1d:4b:10:80:70:82:48:73:
68:4e:5f:cf:f6:11:55:97:56:e3:c8:01:57:d7:ea:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:13:CB:55:EE:9D:8A:56:06:F7:E0:36:8D:9D:89:96:FB:40:95
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:4d:2c:1f:e9:25:d5:b3:b1:48:4b:1f:0f:01:66:27:56:
0e:b8:ce:6f:6d:7c:ac:97:21:18:12:41:3d:4e:8b:54:c0:9a:
4b:d0:a2:63:11:cb:95:be:7f:19:11:75:14:ca:d7:5f:f7:ae:
46:ff:ce:b6:3c:ce:a5:9c:f0:af:ed:2c:14:c6:08:09:b2:56:
48:8b:ff:a1:74:16:24:f4:3e:5f:fb:5b:85:30:3c:37:dc:e4:
b0:9f:4a:37:5a:9a:1c:d8:70:6f:bd:f0:dc:ba:40:74:ea:8a:
fe:d7:c1:9c:09:d9:ac:6c:92:57:f5:f8:65:8b:3e:06:fa:56:
35:0f:9a:d2:a5:3e:24:bf:91:d6:41:00:c6:6f:75:e5:66:83:
7e:09:7a:c0:3b:66:57:fe:2f:3b:2e:37:00:11:3d:87:47:3c:
53:14:0b:de:9d:e6:70:ba:f6:bb:e1:cb:6b:59:bb:83:b7:36:
50:35:09:29:b8:d5:1b:49:f7:3a:04:c6:e5:49:af:7c:5b:69:
e7:cd:7e:88:e2:05:e1:ff:44:0b:eb:56:ae:ca:36:2f:e6:7d:
10:b5:74:06:e6:58:70:90:37:89:6f:ee:79:0a:4c:4d:d8:ed:
0b:33:2b:af:b8:92:12:0c:60:f8:dc:82:c2:ce:19:e2:41:51:
f6:69:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:40 2025 by rpki-client