Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: 1l+rQO7o2ntX0OtfZxmk0D1oWcdmud5GwTEDWcdcQuQ=
Subject key identifier: CB:E0:4D:C9:D2:98:DC:B2:35:78:79:4A:3B:AB:23:41:E5:08:EB:9A
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 01976BBD894B23963DF8127B4D2B2DADAAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 08EA
Signing time: Sat 14 Jun 2025 00:01:12 +0000
Manifest this update: Sat 14 Jun 2025 00:01:12 +0000
Manifest next update: Sun 15 Jun 2025 00:01:12 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: C+3Dw9eMljVe2q5jZ1nzDhP/8w2rdHfcvvmCbOFI9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:89:4b:23:96:3d:f8:12:7b:4d:2b:2d:ad:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Jun 14 00:01:12 2025 GMT
Not After : Jun 15 00:01:12 2025 GMT
Subject: CN=cbe04dc9d298dcb23578794a3bab2341e508eb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:2d:59:ab:24:c8:4e:80:e3:d4:53:0b:f3:
ed:1e:12:c2:b3:ff:96:d2:3e:de:5a:3c:d2:e7:52:
4a:06:34:ee:9a:40:67:ff:45:17:d6:c9:7c:a9:4c:
ec:bb:c9:e6:de:19:75:58:43:9f:65:dc:48:fe:85:
72:f9:b7:e8:02:e6:e4:e2:f2:18:35:6f:33:da:ff:
c6:04:71:69:06:17:f4:c6:af:74:21:95:99:99:85:
5e:af:af:9e:87:92:28:83:f6:5a:4c:92:4f:05:be:
1f:6e:01:2d:fb:df:8b:b0:af:a3:4a:06:14:93:a3:
b9:de:9c:21:5c:86:14:14:1e:36:0c:f7:7e:ed:ca:
ac:54:a5:4f:f2:e3:bd:51:28:ec:9a:62:01:6c:9e:
54:cc:70:fb:d2:47:3e:8d:df:04:b9:00:d4:af:67:
d4:4f:a6:9b:6f:3c:6d:d4:24:f3:92:c3:50:91:07:
5b:a5:82:51:d1:31:af:83:14:b7:9e:dd:6a:4c:c9:
aa:4c:f9:c9:66:19:0c:93:56:2b:81:4f:fc:9d:20:
5e:9b:47:42:6a:3c:f2:66:1c:7e:ec:b6:0b:25:22:
90:ed:95:78:de:f9:fc:1a:d1:11:0e:f8:59:61:db:
4e:e7:83:42:98:fa:dd:f2:0b:e6:a5:7c:1b:d2:87:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:4D:C9:D2:98:DC:B2:35:78:79:4A:3B:AB:23:41:E5:08:EB:9A
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4f:99:11:d0:1b:89:82:83:99:99:82:ef:71:d4:69:b7:f1:
d7:d6:a8:1f:44:b4:9f:9e:dc:7b:07:ed:8a:ce:0d:94:90:39:
22:db:89:1d:d8:e6:73:5d:6e:1f:2b:d6:f9:b9:75:0d:a5:7f:
7e:13:5a:2f:03:4d:c8:fe:ba:18:3e:9f:3f:76:ad:0c:d3:09:
0c:8b:7c:28:09:ba:eb:46:d2:3e:f1:33:48:31:64:98:d9:0e:
2d:0f:64:67:1e:7f:8b:24:f5:b7:5a:5f:fa:68:68:f5:52:17:
d8:ad:e7:3f:f9:0d:7a:0c:59:a7:9e:0d:cb:df:90:d9:81:ab:
37:0e:a8:f1:09:c7:b6:92:a7:e3:75:02:50:e4:57:be:e9:34:
8d:31:35:36:a1:4d:a6:9e:35:50:cd:90:45:24:85:69:c9:ba:
91:2a:01:8d:60:d0:42:0a:2d:92:30:c9:9d:f9:be:4b:3c:2f:
fe:fe:92:9c:94:00:69:10:17:aa:66:24:55:85:64:ff:d7:01:
68:90:57:fe:24:1c:73:c9:04:c5:d6:eb:75:80:86:a7:44:ae:
f6:b9:d5:51:7b:6d:f5:49:e1:72:3b:1f:5a:fa:0b:86:f3:a4:
da:00:b4:d8:f1:93:21:6b:a8:21:a6:9c:1d:75:26:b2:b8:56:
35:11:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:28 2025 by rpki-client