Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: Hp061AkHTj7WieALY9P2uPPsXQn/XWPvhrbA5fY+vh0=
Subject key identifier: 8C:00:AF:5B:0A:7B:4D:0B:76:C2:68:BE:34:5E:0E:1F:92:D0:3A:18
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 01987E6612EE58A091C70F483A4062D155F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 156A
Signing time: Wed 06 Aug 2025 08:01:15 +0000
Manifest this update: Wed 06 Aug 2025 08:01:15 +0000
Manifest next update: Thu 07 Aug 2025 08:01:15 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: RKDGhKs3+lfN/DIIlLrCCBZkHuUi+G4Fp4jBphebUgw=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:12:ee:58:a0:91:c7:0f:48:3a:40:62:d1:55:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Aug 6 08:01:15 2025 GMT
Not After : Aug 7 08:01:15 2025 GMT
Subject: CN=8c00af5b0a7b4d0b76c268be345e0e1f92d03a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:be:2e:0b:56:4e:f6:f4:c6:6e:e7:08:66:
b5:ba:4f:40:80:37:f7:10:c3:35:7e:25:c9:b9:45:
03:cd:c5:12:06:62:dd:d2:ac:8e:9f:c9:01:a1:52:
09:2e:4a:38:48:d4:b1:d6:83:c5:d2:54:f9:8e:94:
8c:38:ca:dc:63:8e:ca:55:46:dd:02:81:a8:5f:09:
3a:da:4b:0e:46:18:e5:55:47:12:37:3f:ca:b5:6d:
c5:9a:44:23:3a:0e:29:35:b3:7a:53:a2:77:76:27:
1f:9f:1a:60:40:1b:e3:15:a0:2b:7a:74:ea:c8:02:
f8:48:1d:71:37:c2:82:7b:28:71:3f:cc:66:47:94:
7e:a3:eb:a2:24:f0:df:20:c2:84:e9:6f:40:af:fc:
6b:44:7d:c1:a8:95:c9:cb:a7:ca:95:91:a5:c7:88:
3d:d0:90:20:31:cd:b6:de:c3:47:ee:95:38:6e:4b:
ad:75:7b:20:8d:2c:67:dc:28:cb:73:01:79:9e:bc:
62:cd:1c:b0:35:c5:94:36:70:90:5e:bc:40:cd:d2:
50:e6:57:2a:5f:ed:7f:45:5b:ac:e8:8d:f0:5b:0d:
8c:92:4b:78:c8:b5:1d:75:ae:c2:ab:9b:f1:ce:6c:
16:df:a6:48:f1:90:6c:38:b3:b0:ee:6d:8e:c3:f7:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:AF:5B:0A:7B:4D:0B:76:C2:68:BE:34:5E:0E:1F:92:D0:3A:18
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:73:af:9e:cb:ee:48:67:20:cb:c6:4e:55:13:c9:bf:a8:0f:
15:c3:5d:28:82:36:8e:3c:aa:8f:f5:60:73:88:4b:bd:8d:c3:
86:c4:25:0e:c1:60:b1:8a:3c:89:cd:e1:2a:96:22:77:ae:5a:
dd:41:6a:9c:5d:a4:de:79:d5:b2:4f:ca:9f:d8:80:a5:4b:7e:
a8:b4:0f:cb:f2:cc:18:4a:6c:ef:0e:b2:c7:13:12:05:0e:ca:
83:bb:1c:93:bb:14:33:84:dc:fb:2b:80:5e:8d:14:69:13:43:
32:43:e9:0f:04:8e:86:f2:29:7f:3e:85:a1:d7:41:3c:98:8a:
7a:b9:b6:17:e7:04:ce:95:ab:f9:e3:91:c6:79:50:cf:2e:80:
f1:71:d1:ab:c9:14:8e:85:0a:f6:59:19:3e:83:13:3e:81:c5:
5a:64:55:38:35:4b:50:61:75:3f:f1:dd:08:08:9a:ab:c3:57:
35:d0:d8:a7:68:66:58:2b:c2:f0:3d:5e:65:e0:f3:cd:96:56:
23:74:56:b0:0f:61:dc:69:f9:4f:67:7c:2c:68:89:b7:75:bc:
51:0e:5c:02:be:86:c5:02:2f:a6:7e:ab:b6:6b:67:3f:81:46:
90:07:e4:a3:38:fe:00:a4:72:aa:bb:f1:41:c5:86:67:11:02:
95:53:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:20 2025 by rpki-client