
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: a+6fGmg/JOL0OpWvnrcG0yqh7LZtAfj+DPolv5zOU3Y=
Subject key identifier: EC:A9:1E:1E:75:95:7F:A8:D2:6C:9D:88:DE:93:19:BB:FE:C2:35:47
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 019879AD620F98E2C7B0A450A1CF643704E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0B61
Signing time: Tue 05 Aug 2025 10:01:02 +0000
Manifest this update: Tue 05 Aug 2025 10:01:02 +0000
Manifest next update: Wed 06 Aug 2025 10:01:02 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: 3PMkrjF0mRsBlIpnVF5mD/w6nicOBgEXVojSpccv6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:62:0f:98:e2:c7:b0:a4:50:a1:cf:64:37:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Aug 5 10:01:02 2025 GMT
Not After : Aug 6 10:01:02 2025 GMT
Subject: CN=eca91e1e75957fa8d26c9d88de9319bbfec23547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:6e:9b:ae:51:10:cc:99:d9:14:8c:08:50:
32:52:9b:e1:ac:9f:f1:3d:d5:33:bf:ea:b1:87:14:
f5:fb:15:a9:e1:4b:30:e8:72:78:c3:3e:b1:d2:05:
9d:bf:a9:0c:b1:e8:72:b5:86:22:e4:ed:42:ab:71:
b7:d1:24:70:c1:f2:67:dc:be:e2:e5:5c:bb:ee:ad:
4f:bf:40:79:00:c2:39:68:08:7a:71:91:96:02:b7:
10:2c:56:fc:57:d1:86:0f:99:fb:32:74:2e:27:cf:
77:48:f4:1e:49:f8:c4:3b:f1:f4:f6:2c:66:82:4f:
31:d8:8c:ad:38:8d:53:58:4f:79:88:19:1b:79:22:
2a:56:5a:3b:1f:df:60:77:98:33:b4:b9:fb:56:a2:
f0:de:0b:88:80:63:f8:d3:33:0c:86:0d:10:0c:2b:
6e:a0:09:b2:05:b7:5a:7b:95:c7:68:21:d2:17:ed:
bc:22:ea:52:3d:26:80:9f:82:ed:ea:11:55:fd:80:
a5:dc:48:f4:0c:6d:d6:1a:33:31:b5:fb:f2:6e:7b:
e6:f1:bb:1e:31:a1:81:c4:d0:be:f0:18:28:37:26:
f3:24:ad:34:26:55:bc:5d:19:cd:0c:62:b0:8d:af:
e1:ce:c1:47:5d:11:32:c5:ec:04:bd:21:85:49:62:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:1E:1E:75:95:7F:A8:D2:6C:9D:88:DE:93:19:BB:FE:C2:35:47
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c3:24:2b:83:23:50:a4:8e:66:c2:31:12:56:8b:73:3a:08:
9e:3d:04:9f:53:f0:7d:3a:d1:74:ae:23:8b:eb:02:23:1d:71:
cd:9b:f4:e1:da:71:60:a3:56:01:e3:7e:d2:da:fd:87:75:f9:
d8:ce:ed:0c:fe:ba:a9:75:70:64:3a:cb:3e:26:02:be:25:ca:
94:b1:18:4f:c7:01:f4:c2:ff:84:90:0d:34:5d:6a:d0:ed:bb:
5d:79:f4:40:62:0c:94:6f:c3:76:65:1c:aa:44:70:b3:c7:0d:
be:43:79:36:af:a0:48:63:9b:96:c3:d4:98:72:23:2c:2c:56:
cc:2c:8a:5a:f7:d0:8d:00:4f:54:6c:d8:49:e6:61:cc:4d:15:
d3:d2:7e:76:51:30:cd:b9:06:2a:6c:e9:13:c0:78:d2:95:f4:
27:26:c9:e9:07:d2:22:2e:26:df:70:7d:a8:d9:c1:b6:df:da:
f6:e8:97:c6:bc:2a:60:48:d0:b9:11:68:92:08:51:d8:f5:fd:
2a:00:00:97:57:1e:ab:d8:c6:04:a8:62:f8:64:da:73:c3:8c:
63:da:ce:a1:92:5d:da:25:af:31:5f:38:34:0b:05:9c:c7:52:
5b:28:71:55:bf:ac:08:e3:de:fa:63:9b:7e:1e:da:aa:8b:a7:
a2:81:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:22:05 2025 by rpki-client