Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: n1CIwOq8yvjkgwlsU0mDPSgOtClVO/5mCEgg399dkPA=
Subject key identifier: C3:61:ED:3E:6D:B2:64:5E:1C:B7:1F:0E:0D:AC:4F:A4:B8:F9:E7:F9
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 01976D3DDD08378521CE5C9F05D25AD7C01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0AD6
Signing time: Sat 14 Jun 2025 07:01:00 +0000
Manifest this update: Sat 14 Jun 2025 07:01:00 +0000
Manifest next update: Sun 15 Jun 2025 07:01:00 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: 9n3kmkaOm3L78XXvEWKsY4FLmW4vyqh99wJknW2mxEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:dd:08:37:85:21:ce:5c:9f:05:d2:5a:d7:c0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Jun 14 07:01:00 2025 GMT
Not After : Jun 15 07:01:00 2025 GMT
Subject: CN=c361ed3e6db2645e1cb71f0e0dac4fa4b8f9e7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:0a:24:fe:54:64:16:be:75:01:4d:df:a6:
77:16:92:0c:f8:01:55:13:c8:58:5e:10:51:68:71:
b7:07:df:45:84:52:f4:01:eb:be:b4:74:68:61:be:
3b:c1:52:84:99:98:ee:c4:aa:1a:51:1a:f4:9b:98:
c3:0d:e4:88:25:9c:dd:cb:be:58:93:24:d9:21:c5:
f2:6c:46:7f:fd:2e:1c:b2:af:f6:a8:00:aa:8d:a9:
93:3d:85:14:26:be:9b:d6:93:9b:7c:cd:f3:dc:34:
39:de:25:e6:6f:16:ee:f3:f6:73:cc:51:a9:48:65:
bb:80:c6:66:6d:6c:fc:04:2c:4c:26:d6:fa:55:82:
55:bb:0f:7f:05:1b:26:6d:c9:5f:72:cd:09:78:eb:
fa:c9:ea:d3:8b:4c:bc:02:60:16:68:1a:df:b1:39:
0a:a7:86:b3:80:2f:db:45:32:10:c2:37:52:19:3d:
c9:4f:d0:4a:1a:fe:fd:d4:42:ff:aa:17:b7:4c:00:
e9:fb:93:0f:b3:b0:d2:fd:33:b5:ce:62:70:8f:df:
fb:ca:02:82:0d:3f:5b:51:71:b5:cb:71:46:93:af:
5f:cc:df:44:50:32:46:ed:f0:e8:11:51:be:93:b5:
b0:6c:42:1f:a7:df:8e:78:8f:9b:4b:88:9b:40:d3:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:ED:3E:6D:B2:64:5E:1C:B7:1F:0E:0D:AC:4F:A4:B8:F9:E7:F9
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3c:41:a9:47:4f:37:59:e4:18:6d:52:1a:96:56:68:4c:8e:
b3:e0:88:3b:70:4a:4a:e6:52:d3:63:f0:f8:b4:5b:a8:4e:6b:
3b:60:74:c4:51:05:cb:1a:64:2f:ca:a2:5c:52:24:ef:79:67:
79:ce:f9:50:6b:5e:02:da:1a:ac:0d:89:e8:89:cd:b4:63:89:
97:b0:ab:74:2c:65:49:fc:14:91:9c:83:77:54:04:11:9c:51:
ef:27:6c:7e:3e:4d:63:60:7f:54:bf:6b:17:07:83:b0:81:7e:
7a:0a:a8:f0:fd:74:ff:46:c5:b8:60:a5:cf:55:e1:06:e3:32:
53:85:9c:e1:cf:46:2a:7a:fe:65:97:23:15:82:fa:f7:e6:fa:
9f:f6:d9:9f:81:d8:19:2c:c7:67:32:4b:8a:b0:65:a5:7d:34:
50:71:60:f1:f6:56:91:17:a8:28:bc:f7:e6:cd:81:36:19:db:
ec:43:86:fd:7e:12:58:a7:b2:cf:76:f1:15:06:8c:22:ef:dc:
11:3f:1a:ef:99:e1:73:dc:e7:3c:67:e9:3e:01:d1:f0:7d:be:
3f:67:b2:3d:31:6d:d7:d3:43:b0:e6:76:dd:3a:dc:ae:f9:30:
73:ed:06:da:08:5c:62:cd:6d:07:77:ef:42:f0:5b:58:92:09:
ac:39:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:47 2025 by rpki-client