Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
File: KyO4dALEaK1icsN77YjlzcbkwGE.mft (raw, json)
Hash identifier: CubPjde5xmP2BX7LIYZ63joD1jLzBFkj4QAwBZjKzgI=
Subject key identifier: EB:E0:D7:BE:76:F2:A9:1A:48:EB:5D:5C:6D:FC:3F:98:87:19:64:F3
Authority key identifier: 2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
Certificate issuer: /CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061
Certificate serial: 019771F5D8E2A33CA97D97F9A107D9BE276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
Manifest number: 66
Signing time: Sun 15 Jun 2025 05:00:26 +0000
Manifest this update: Sun 15 Jun 2025 05:00:26 +0000
Manifest next update: Mon 16 Jun 2025 05:00:26 +0000
Files and hashes: 1: KyO4dALEaK1icsN77YjlzcbkwGE.crl (hash: nk2iflWPHFZbXTxNcfPpGMIrrHVzYP0vM1JV7Bt5CS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:d8:e2:a3:3c:a9:7d:97:f9:a1:07:d9:be:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061
Validity
Not Before: Jun 15 05:00:26 2025 GMT
Not After : Jun 16 05:00:26 2025 GMT
Subject: CN=ebe0d7be76f2a91a48eb5d5c6dfc3f98871964f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:65:d6:f0:5a:9f:6b:28:c5:64:0a:ce:7d:
d5:93:d8:6f:20:37:e3:a8:a8:a8:e3:57:97:f5:bf:
f6:88:d1:95:c2:b4:01:fd:06:ba:fc:f1:7f:3a:69:
28:a5:02:ff:e5:43:12:b8:e1:43:4e:02:d1:00:5a:
8b:ee:e7:74:4e:77:22:24:bd:1c:08:ee:17:16:be:
74:1c:7d:56:ee:26:23:65:55:24:bc:b1:71:8b:27:
bb:85:68:c3:29:64:17:b2:de:5b:05:ba:bd:89:6c:
ee:3a:68:cd:4b:39:d2:36:4d:31:d0:49:77:49:ab:
75:09:4c:64:32:67:b0:eb:13:f0:1a:d0:6b:a2:20:
58:4e:e3:3a:64:80:a6:de:11:64:bc:d8:a8:36:a4:
09:11:fe:85:a3:75:a6:2f:80:46:03:0a:a2:94:97:
7a:ca:32:68:92:29:84:cb:7d:1f:fc:ef:2a:e0:6d:
aa:da:6b:7d:e1:48:28:1f:a2:48:6a:11:03:76:99:
f8:5a:5b:35:73:bd:31:e8:64:7e:92:80:53:39:e1:
09:b5:79:f6:a7:e5:e3:9b:a2:1d:3b:f7:1f:6f:32:
83:c6:ed:09:74:d8:20:4c:65:db:43:ad:b8:5c:5f:
03:9b:a3:be:8b:2b:c5:14:63:83:e0:f6:56:8c:8f:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:D7:BE:76:F2:A9:1A:48:EB:5D:5C:6D:FC:3F:98:87:19:64:F3
X509v3 Authority Key Identifier:
keyid:2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3b:e5:aa:27:03:62:6a:53:4c:76:e2:b8:44:ef:c1:a7:88:
21:55:3e:cf:bd:42:30:c9:c6:ff:64:c4:87:a1:69:cf:d8:9f:
01:ea:d0:29:e0:0a:66:67:00:12:f1:7c:2c:6a:56:a4:4c:7a:
4d:ce:00:c8:9c:fb:c9:e4:ab:d7:f7:08:39:c4:b2:36:60:a8:
76:09:26:86:00:55:42:56:a3:f7:01:0a:ca:a0:cf:d2:73:70:
c0:f7:3c:81:4a:9e:f1:9b:01:23:96:d5:87:d5:c9:e3:c1:10:
1f:dc:8a:4d:95:e2:af:e0:db:c3:e5:d9:b6:0a:c4:e5:4c:74:
21:d9:18:a4:5e:1d:91:37:80:32:e1:cf:c9:64:db:6e:49:cb:
15:fd:aa:fb:ea:e5:e7:de:99:d5:95:09:cf:c4:df:10:cb:96:
f2:a8:36:45:84:0f:4b:5a:68:96:c7:b9:5b:e9:2e:4a:ea:f7:
e5:3f:84:dd:d5:20:e3:81:67:b6:e3:3c:8b:e3:06:40:26:e8:
3b:ac:8b:54:5c:8b:df:a7:fb:c8:04:54:d2:b7:b1:ac:a5:a2:
09:cc:ab:38:51:7b:c8:0b:4c:1c:94:f0:a2:2d:ca:20:13:2d:
8d:5b:ae:94:ce:06:f5:95:72:88:c3:4a:b4:31:55:f0:a3:78:
4b:88:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:49 2025 by rpki-client