Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: +w4qtFuGse9N3/XEM0mh+M8cxPa52+DNZzPq7Uw0i5E=
Subject key identifier: 79:1B:68:EE:2A:A2:4C:EC:6B:31:14:27:6E:73:8A:73:1E:77:37:42
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 01987DF8A5CE26802E5E08CF11D18E072343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0978
Signing time: Wed 06 Aug 2025 06:01:44 +0000
Manifest this update: Wed 06 Aug 2025 06:01:44 +0000
Manifest next update: Thu 07 Aug 2025 06:01:44 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: 0q3HnijgFsAOkBa/KsMuOtJRBzx3FEoDsxAzqqbOEOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:a5:ce:26:80:2e:5e:08:cf:11:d1:8e:07:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Aug 6 06:01:44 2025 GMT
Not After : Aug 7 06:01:44 2025 GMT
Subject: CN=791b68ee2aa24cec6b3114276e738a731e773742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:b1:5a:c9:31:d5:e9:c6:27:a6:6c:7d:cc:
e0:ea:0a:6e:9a:40:03:c4:30:a3:33:e1:2e:c2:69:
f8:6f:f7:ae:c8:17:ed:d7:90:02:1e:be:fb:38:73:
34:52:9d:47:4f:eb:89:a5:d6:d1:ac:1e:e0:ce:f6:
64:70:7e:ca:ee:d0:b9:ce:31:82:c2:3e:fd:f2:85:
2f:f3:f7:7b:94:cc:bb:ed:32:ef:cb:3b:4f:d3:31:
10:cd:37:76:e9:56:10:00:91:f5:af:e1:57:09:1c:
20:0b:8c:99:8b:02:34:21:d0:6b:bc:36:34:36:25:
1b:e6:b9:74:b3:74:fc:4d:7e:c3:6c:1b:9b:50:c5:
6e:35:a9:5a:87:b8:93:e1:62:24:2d:0b:e7:6a:9e:
fd:fb:0c:cf:91:b2:99:2a:1e:16:d2:0a:37:c1:3c:
cd:a3:a4:73:0d:32:c9:ef:a1:a1:7a:c9:a4:dc:9d:
78:cc:ea:81:03:44:99:55:46:b3:2a:78:1b:a3:b1:
75:da:2f:1a:02:a1:b2:8b:3d:2b:ca:c3:03:33:a6:
e7:e3:a9:13:c4:4c:51:e9:7e:0e:e6:ff:c3:b6:d3:
84:db:8e:6a:fe:f2:bc:5d:91:9a:fb:b6:0d:d6:d4:
16:11:05:7a:ee:f7:3b:05:42:d6:66:d6:a4:bf:37:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:68:EE:2A:A2:4C:EC:6B:31:14:27:6E:73:8A:73:1E:77:37:42
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:18:a2:2b:f7:0f:36:58:7d:21:7c:54:53:1c:38:04:5a:
61:70:57:62:20:1e:e2:aa:c6:4c:a6:ab:58:ce:a0:bf:d4:f7:
95:07:45:6a:44:00:2e:e2:c7:7c:3b:88:c9:1d:aa:d4:73:9b:
68:bb:d6:b0:87:e6:89:07:2b:3c:94:c6:9f:18:03:df:95:f8:
f8:82:78:f6:18:4e:2e:8f:9e:c2:c5:64:14:8e:1b:de:d7:58:
42:f2:07:23:38:db:a6:05:38:d6:8c:63:49:f5:35:79:28:b8:
36:da:cd:29:9f:b2:27:5e:ff:de:f9:2c:25:b4:a4:37:f2:3e:
b1:3c:66:b6:e8:59:88:15:d3:e0:7c:43:4b:dd:52:9a:86:35:
a8:56:f3:45:15:7a:6f:7c:1c:d3:8c:44:a0:01:59:c8:65:b0:
ac:02:c1:a7:a2:9a:bc:62:51:ac:d1:9c:09:bb:fc:f3:7f:f2:
62:ef:94:5a:82:ba:f7:bb:54:10:e6:36:05:7d:9b:6f:9d:0e:
a8:ea:30:36:e0:4f:ed:8b:1c:82:85:76:75:b6:c1:bf:cc:a4:
8a:d7:85:ad:ed:6f:34:87:2c:e3:9c:1e:76:4b:11:d8:d3:29:
6c:14:09:44:71:85:89:33:96:ae:6a:7d:5b:f1:ac:01:1f:30:
46:0d:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:15 2025 by rpki-client