Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: c6xM14FBw8Sp92v+bql7KLR4zJ3zS79oRuP7kAxypW4=
Subject key identifier: E7:F7:9F:75:08:06:96:33:C3:DB:DB:BC:91:5B:D6:A8:B6:51:DD:1C
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 01989ECC26B87CF7FD6F53E152C74E16A04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 0657
Signing time: Tue 12 Aug 2025 15:00:35 +0000
Manifest this update: Tue 12 Aug 2025 15:00:35 +0000
Manifest next update: Wed 13 Aug 2025 15:00:35 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: gwmkNDhUChsHhOduSsmL9RYfw5oPKdDQWKduQjRMeNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:26:b8:7c:f7:fd:6f:53:e1:52:c7:4e:16:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Aug 12 15:00:35 2025 GMT
Not After : Aug 13 15:00:35 2025 GMT
Subject: CN=e7f79f7508069633c3dbdbbc915bd6a8b651dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:ce:8b:25:da:0d:0b:95:4f:37:4c:9a:63:
7f:b9:35:b4:62:42:4d:67:cb:91:2f:30:cd:28:90:
d7:5c:19:b0:bc:0f:01:94:fd:0e:e8:1f:b8:41:30:
2d:89:51:1c:a9:ad:5c:63:5c:f2:72:4f:82:7c:2b:
2b:f5:d7:68:4c:f4:28:cd:d9:88:4b:72:15:16:06:
b7:f9:6a:28:cf:62:bf:7a:38:b8:89:46:7f:b7:89:
1f:b0:87:29:a2:84:da:32:e7:ce:70:a3:56:30:9d:
64:68:4c:8b:e8:91:b6:9d:51:f2:3b:ba:e6:6c:8e:
15:2a:80:bc:3c:4e:e0:72:b6:dc:76:46:96:eb:cb:
eb:b4:5a:b5:ab:65:90:88:78:a6:ef:4b:f4:8d:8b:
aa:56:60:03:25:f5:7c:0c:b9:02:05:19:43:a9:c1:
55:59:dd:70:48:10:b8:2e:5c:39:32:c0:b6:4b:b7:
44:41:71:6b:99:7a:ff:15:a3:a1:10:c0:63:42:90:
1e:51:f3:2d:0e:7f:7a:04:d5:65:2a:e2:ec:a7:46:
d8:f5:99:20:67:bd:c8:c9:4c:79:a0:81:cf:2a:7c:
bf:43:a6:14:d3:27:54:b9:84:ed:43:23:c6:9a:ff:
c8:65:0e:e2:fc:f0:11:e0:f2:c6:b0:80:35:e2:78:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:9F:75:08:06:96:33:C3:DB:DB:BC:91:5B:D6:A8:B6:51:DD:1C
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:04:93:e0:fd:e9:96:60:5c:84:6a:60:18:60:13:62:2f:f2:
25:4c:82:0c:db:be:fe:23:f0:3b:50:03:fc:44:49:63:95:0c:
11:66:34:a9:4d:66:90:33:1c:4a:83:94:23:6c:58:7c:6e:13:
41:7e:22:a5:0e:8c:b5:67:a7:aa:9c:db:bf:f9:03:c4:8d:e1:
1c:c2:17:b5:07:f2:99:b0:21:ae:68:08:79:ef:07:a3:bc:89:
7f:0c:20:a4:b9:d4:14:5e:2b:1b:87:19:da:ed:90:7d:1c:19:
d3:26:45:c1:79:85:0e:4a:03:3e:72:a6:e3:15:15:41:08:89:
e0:b2:2f:ab:68:df:57:bf:9b:48:bc:9e:68:12:02:31:f2:1b:
92:db:90:d1:2e:4f:52:26:ea:7e:62:64:01:7a:e8:8c:c9:14:
69:90:ec:d7:25:d4:bd:40:4b:36:d3:f6:e1:2c:14:3a:52:bf:
da:56:24:a9:1c:82:b8:b0:53:7f:5b:48:f0:f2:a1:e5:ab:54:
cb:4c:e9:28:39:e8:8c:c1:d0:f4:96:29:05:98:53:6c:25:7b:
08:9e:c7:5b:bb:d4:ad:01:b1:98:20:b5:4e:d1:99:d7:db:dd:
76:4e:a5:72:7b:34:63:81:77:c4:76:8c:ea:c3:9c:4d:52:43:
a8:4a:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:24 2025 by rpki-client