Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: uC31JHXSxSqs18J3gmDIbd10pnKj5fMEIV3Bp/KR7Tw=
Subject key identifier: 09:D3:2A:05:DF:1B:EF:2E:C1:91:C7:BC:5F:78:F7:B1:2F:E8:68:2A
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 019885E8389920D041B96CB21790E76E6040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 0412
Signing time: Thu 07 Aug 2025 19:00:45 +0000
Manifest this update: Thu 07 Aug 2025 19:00:45 +0000
Manifest next update: Fri 08 Aug 2025 19:00:45 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: ByqQqU/4LHSEbr4fJ3DG5v96pZ0BpURbpv0kIc2ljIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:38:99:20:d0:41:b9:6c:b2:17:90:e7:6e:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Aug 7 19:00:45 2025 GMT
Not After : Aug 8 19:00:45 2025 GMT
Subject: CN=09d32a05df1bef2ec191c7bc5f78f7b12fe8682a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:60:06:9c:bb:78:26:c6:12:0f:40:9a:e2:
e4:22:09:98:5d:93:60:e9:b0:12:e0:1d:88:3a:17:
5e:13:d8:22:04:3b:97:42:96:a1:97:19:e3:0c:dd:
6a:76:54:cb:c5:86:eb:2f:81:b1:22:10:f5:46:58:
7b:52:26:12:c8:66:a5:62:10:99:fb:86:60:a6:17:
ea:07:ae:c4:31:0d:6b:e2:10:2e:f0:a2:ab:95:f6:
e3:13:49:89:50:7e:32:d9:66:1c:59:e8:88:ee:ce:
fe:2e:09:82:bd:1a:72:a3:7f:9d:68:a8:b9:e1:3a:
d5:01:c1:9b:fa:96:91:33:0d:d6:03:04:07:ee:15:
7f:18:fa:b2:10:99:27:b8:9b:8a:02:cf:88:40:e1:
63:14:50:13:92:c0:8a:d2:27:d5:58:24:d0:91:67:
d4:50:9a:3d:76:7a:e7:ed:6d:3d:ee:dc:7f:97:ed:
cf:3a:7e:a0:56:b7:e8:cd:81:f5:7f:fa:c5:8b:78:
09:b6:03:e8:48:3f:ec:92:b7:81:09:80:cd:d5:0d:
9d:2d:b8:89:08:c9:1f:3c:d3:69:73:6f:da:41:65:
a2:cf:60:c4:14:7b:c6:5e:ff:2b:7b:43:0f:f6:1b:
ad:c7:e3:eb:1a:35:55:e4:47:7b:b3:c8:af:f9:04:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D3:2A:05:DF:1B:EF:2E:C1:91:C7:BC:5F:78:F7:B1:2F:E8:68:2A
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:11:25:da:e7:66:7d:46:cf:1a:f6:e1:2a:23:e8:f8:f4:
93:b0:be:e4:8f:17:70:ce:14:1e:7b:07:b2:9e:14:e8:4d:0e:
ea:dc:f2:63:46:37:ed:36:0b:35:7e:04:58:20:4e:a8:d3:3b:
ea:06:67:75:9b:8d:61:89:77:61:6e:98:64:25:a0:50:74:de:
52:22:81:d3:d6:ec:d9:7f:b8:7b:67:34:09:58:5e:42:35:4e:
d3:fc:a9:45:3a:aa:f1:73:64:89:90:c6:18:a9:d0:ed:b4:9b:
63:02:6e:f5:e8:e7:e5:68:f0:ef:2a:88:d7:ce:05:6d:b0:3a:
d6:af:0f:ca:73:0f:97:a2:d1:68:a3:34:ec:27:7c:cb:60:e1:
e7:3f:91:5a:6c:83:c9:04:42:4b:59:0a:f2:7b:e9:0a:31:c5:
90:c7:d9:cc:23:47:00:de:e7:c7:72:dc:b0:cf:ef:30:6f:86:
7e:00:88:dc:a5:6c:35:1a:22:20:75:c9:ee:38:0f:e5:2b:a2:
fe:40:18:6b:cb:26:bb:15:19:77:42:0e:b8:82:7f:44:36:44:
ea:9a:de:9b:a8:8f:db:0e:bf:3d:b7:85:a0:a2:0c:08:08:a8:
ca:78:bc:69:db:ed:54:ca:64:90:d8:07:31:fb:e3:41:d4:4c:
9b:2c:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:32 2025 by rpki-client