Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
File: KyO4dALEaK1icsN77YjlzcbkwGE.mft (raw, json)
Hash identifier: +Ds8xBZqMplwq553BjoS+efSeaf99aZ+G1HgvAfe9JU=
Subject key identifier: 7D:61:84:67:42:73:C4:02:0C:88:E9:02:3F:42:04:9F:54:FA:13:DE
Authority key identifier: 2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
Certificate issuer: /CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061
Certificate serial: 0198A128C784486B2326040AA15C517ED8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
Manifest number: 0103
Signing time: Wed 13 Aug 2025 02:01:00 +0000
Manifest this update: Wed 13 Aug 2025 02:01:00 +0000
Manifest next update: Thu 14 Aug 2025 02:01:00 +0000
Files and hashes: 1: KyO4dALEaK1icsN77YjlzcbkwGE.crl (hash: XRzGHibReK39tba7uVmRHg5pEmIGh9W+wkyT6I87puI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:c7:84:48:6b:23:26:04:0a:a1:5c:51:7e:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061
Validity
Not Before: Aug 13 02:01:00 2025 GMT
Not After : Aug 14 02:01:00 2025 GMT
Subject: CN=7d6184674273c4020c88e9023f42049f54fa13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:57:91:52:9e:64:45:79:4b:db:af:0d:67:
7b:06:57:93:eb:11:47:a8:b6:c8:14:37:1c:b2:e9:
e2:d4:7d:0e:19:a1:b9:ff:47:8e:ae:e5:c2:17:4f:
59:80:58:59:2f:ed:82:1c:c4:df:55:c0:3f:e3:ce:
76:10:4c:dc:cb:3a:b0:6c:d2:5a:2a:58:27:30:d2:
c3:92:fa:7d:b3:e6:ea:52:0b:ba:9c:8a:08:d9:e9:
c7:4b:53:ec:5d:a7:b3:56:41:ce:ed:0d:ef:89:cf:
2d:a2:85:d8:f2:e4:71:de:68:aa:fd:47:0a:e0:6d:
3c:c2:74:b5:ea:c9:32:44:69:9e:09:44:d2:32:e9:
60:8f:b9:7c:22:3d:59:12:ae:7e:f3:65:b6:2a:09:
dc:e5:ee:b1:f9:2e:d3:c7:2e:94:e9:a1:60:a5:ce:
70:42:98:62:0e:eb:53:bd:89:bc:92:ed:49:4a:2c:
92:4d:5f:4f:a8:bb:6d:fd:dd:16:b7:3e:9c:ab:81:
d3:e1:29:bb:5c:79:4f:b8:55:71:6c:c6:19:97:74:
53:70:90:15:99:e4:d8:6d:b1:6a:3f:4e:e3:48:61:
97:8a:00:a4:1b:f1:23:4f:a6:f6:1c:02:e3:19:d0:
b2:89:11:e4:46:f6:67:e6:8e:81:2e:ae:95:f7:70:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:84:67:42:73:C4:02:0C:88:E9:02:3F:42:04:9F:54:FA:13:DE
X509v3 Authority Key Identifier:
keyid:2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7e:c9:25:e2:8f:e6:92:1b:f0:ce:c0:12:87:a0:e9:22:d6:
52:1c:15:e7:5c:fc:7d:29:1b:37:39:1c:2d:45:af:7c:35:45:
97:3b:cf:60:47:36:71:29:a7:fb:8a:0a:8f:56:2f:20:88:86:
54:3c:84:ab:e0:45:25:81:a7:ec:9b:9b:88:6f:dc:ef:82:da:
d0:4f:59:43:2a:5c:11:41:4c:6d:4a:3c:91:25:61:bb:33:0e:
ea:7a:b0:14:88:5c:fa:d8:41:3a:a8:53:1c:65:ea:d7:94:cb:
b2:4c:1f:51:27:df:ac:78:5e:de:45:21:62:56:36:b0:85:bc:
cb:e0:a1:72:8d:47:f6:6d:f6:40:ea:44:49:8a:9c:69:0b:39:
a6:8c:b6:06:0d:46:d3:47:19:63:e1:7e:e5:fb:0e:58:89:bf:
db:76:50:b0:5f:c0:0f:41:56:f7:df:bc:6c:c5:66:60:e6:a6:
8b:34:69:af:9c:bb:51:b9:8f:4f:9d:e2:05:5d:95:b2:11:dc:
fa:36:d2:21:7a:7a:51:71:03:3f:cd:2f:5a:6a:fc:02:af:8d:
76:81:6e:aa:c5:a8:47:c3:d5:ab:17:95:38:7c:58:01:da:ff:
fd:45:b7:87:41:3c:53:2e:de:79:e2:84:99:37:01:08:d9:e1:
58:9f:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:39 2025 by rpki-client