Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
File: KdIywSew2DMQPDH7UlTsuZVrDEw.mft (raw, json)
Hash identifier: glJVlstyMtDe/sEwCI/NnhUbeMu0CA1LLqm0jKApQZI=
Subject key identifier: 0C:11:27:E0:4B:53:63:9F:8E:B9:38:8D:D8:79:FA:95:9B:D5:1A:2C
Authority key identifier: 29:D2:32:C1:27:B0:D8:33:10:3C:31:FB:52:54:EC:B9:95:6B:0C:4C
Certificate issuer: /CN=29d232c127b0d833103c31fb5254ecb9956b0c4c
Certificate serial: 01989F0310A50BE7D9FAC9A704DAD342687D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
Manifest number: 01D9
Signing time: Tue 12 Aug 2025 16:00:34 +0000
Manifest this update: Tue 12 Aug 2025 16:00:34 +0000
Manifest next update: Wed 13 Aug 2025 16:00:34 +0000
Files and hashes: 1: KdIywSew2DMQPDH7UlTsuZVrDEw.crl (hash: 52GU6YuNVKvGhpHZ8PcfzkCspAfbXg8VIjDTKYPD/6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:10:a5:0b:e7:d9:fa:c9:a7:04:da:d3:42:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d232c127b0d833103c31fb5254ecb9956b0c4c
Validity
Not Before: Aug 12 16:00:34 2025 GMT
Not After : Aug 13 16:00:34 2025 GMT
Subject: CN=0c1127e04b53639f8eb9388dd879fa959bd51a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:6c:73:07:be:8b:1f:89:21:db:58:6a:4b:
b9:44:cf:5d:28:48:51:e7:e9:37:ec:e0:a8:d2:70:
01:25:77:ce:2a:d3:5d:0d:4f:12:e1:49:da:d2:c3:
d1:19:5f:53:ea:29:ea:4a:f0:43:5a:42:a2:75:1d:
e3:63:a7:ae:c2:6b:d3:57:08:df:4f:bc:3f:6a:16:
fb:a2:de:93:99:5b:6a:11:26:cb:b2:f6:8a:f1:95:
4f:64:f4:f9:03:de:de:dc:dc:85:db:a8:ae:c4:af:
c8:01:19:7f:b4:8b:ff:27:9f:e7:b8:4a:fd:27:bc:
0a:94:0e:f8:a6:a7:46:b9:87:75:ad:71:c6:a7:37:
00:8c:ca:a6:65:2f:c2:87:eb:46:74:d1:9c:7a:6f:
d8:9c:27:62:ad:3e:76:20:c7:e9:87:f0:b8:bb:5c:
8e:61:3d:40:05:e6:54:79:59:87:30:4d:27:08:0f:
2e:de:80:b3:f8:5b:42:8e:d2:b5:93:d4:92:22:92:
b6:a3:ac:6e:4c:01:e4:b6:b9:80:ca:fc:79:59:2b:
d3:b0:8a:0f:7a:cc:14:cf:d9:b9:2e:5e:8b:9c:ad:
4d:7b:ce:e8:0e:76:85:bb:aa:ea:bd:ac:84:f0:00:
16:a2:d1:04:d3:4a:14:fa:cf:e7:3d:79:63:8b:2d:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:27:E0:4B:53:63:9F:8E:B9:38:8D:D8:79:FA:95:9B:D5:1A:2C
X509v3 Authority Key Identifier:
keyid:29:D2:32:C1:27:B0:D8:33:10:3C:31:FB:52:54:EC:B9:95:6B:0C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1b:e0:40:c3:80:c2:61:2e:63:1f:20:39:c6:f3:60:0f:fe:
dd:d9:ef:0b:a4:1b:61:9a:4b:92:e1:f9:8e:fe:a0:9d:62:2d:
33:56:8d:c0:10:ad:b9:bb:58:dd:09:5a:58:a7:f4:90:10:bd:
bc:7e:f5:cf:e4:39:21:6c:2f:c6:00:7f:7f:60:d3:2a:35:c9:
9e:93:b4:c5:a2:ff:b7:16:dd:54:42:e7:fc:57:6c:11:ba:43:
32:20:b5:28:4e:cb:66:50:bc:be:97:57:8b:e0:0d:47:d2:3d:
f8:02:65:44:c5:b2:d0:ff:f8:48:c0:21:e5:30:89:8e:3d:88:
48:9f:e7:83:98:6a:24:9c:e7:bc:d8:a2:29:1c:0f:b3:0d:d1:
6a:e6:06:aa:7b:5f:56:fc:ef:1f:35:f1:51:56:2a:62:ba:0f:
42:11:8b:7c:50:67:b2:92:ca:de:75:e0:81:ac:ff:01:f9:f8:
dc:37:26:48:67:5c:a0:48:7f:d2:ca:68:03:1c:8c:3a:f9:da:
c0:21:45:63:c1:ff:90:bb:93:7c:35:34:75:bb:1b:c5:15:9a:
e0:37:f9:a4:0a:c7:3b:f1:f0:c1:20:e9:43:c3:3c:95:55:3c:
02:3f:84:5f:65:0a:85:85:76:25:59:a3:4c:0f:1d:bf:a8:85:
24:07:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:05 2025 by rpki-client