Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: EVtDLWrTe0dwcyGCEmOLVVODbF7Ycxo/i8UOkmOLhBA=
Subject key identifier: 9C:4D:F8:1B:15:EF:88:A4:61:47:78:8C:78:FE:62:D4:D3:76:ED:7B
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 01989335CCCCE4535C480BF16CB8F012596E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 15B7
Signing time: Sun 10 Aug 2025 09:00:33 +0000
Manifest this update: Sun 10 Aug 2025 09:00:33 +0000
Manifest next update: Mon 11 Aug 2025 09:00:33 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: 3s9GTwUOaNrAYe1lHYW7cco7EhCegoQOreU7ot8hxIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:cc:cc:e4:53:5c:48:0b:f1:6c:b8:f0:12:59:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Aug 10 09:00:33 2025 GMT
Not After : Aug 11 09:00:33 2025 GMT
Subject: CN=9c4df81b15ef88a46147788c78fe62d4d376ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:82:12:9e:f8:89:f6:e0:12:2b:2d:02:f4:
fa:b7:6b:05:dd:1a:7a:9d:5d:c3:99:12:e2:46:4a:
10:a5:34:5c:b2:f8:3a:cf:7c:dc:99:3d:d8:62:5b:
58:e3:59:85:1a:cd:64:23:02:fe:2f:de:a2:10:22:
76:81:c5:f6:5f:5b:75:61:2b:07:80:c4:a1:5c:3a:
2f:e6:d3:b9:f8:30:6f:0d:d4:38:bb:f6:c8:61:37:
ea:08:d4:82:3a:c7:a6:96:7d:75:7c:97:bd:2b:97:
f7:e6:b2:d2:b0:b1:72:fc:bb:c5:80:99:c8:7a:cb:
9b:eb:c0:35:f9:22:7e:4b:1a:93:9a:1b:eb:21:47:
c4:8f:6a:81:62:7a:d7:6e:59:f6:1d:a1:d6:08:2e:
50:5c:6e:a2:f7:e0:53:0c:bb:1c:dd:f0:5f:93:db:
9e:dd:fe:df:78:12:b1:7d:79:b5:c5:0b:d1:19:ab:
1c:ac:60:ea:ee:c7:ce:d2:de:2f:50:c9:d4:c5:d6:
b6:e5:58:6b:0c:ab:9d:54:1b:a7:64:2f:2d:85:67:
d6:fb:df:d9:a0:05:9d:3d:86:f5:ee:cd:78:b2:3a:
30:ec:0a:c8:bc:88:95:7b:73:08:cc:ec:e3:ba:2f:
94:32:98:d2:50:25:65:da:28:59:c2:8c:c1:97:ae:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:F8:1B:15:EF:88:A4:61:47:78:8C:78:FE:62:D4:D3:76:ED:7B
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:ae:d7:0e:ae:3a:ec:8f:3e:10:10:7f:65:a8:14:49:48:
7a:a2:9b:8d:ca:c1:39:04:31:c3:46:c6:3f:83:ff:0e:3b:84:
9e:d7:5a:ae:20:91:f3:22:27:d3:a6:e5:5a:8d:7b:56:3d:8c:
61:57:60:04:32:52:f7:86:98:bb:be:8b:a9:5e:f0:1f:d3:a1:
65:0a:f1:83:73:df:0d:7b:45:bb:69:a7:47:4f:bb:5c:25:51:
ae:36:c1:ae:1a:6c:4b:2f:82:69:e4:d1:66:f8:50:3f:06:77:
9c:0a:a7:ba:f7:0c:93:f2:e3:91:ff:66:41:fc:a2:2c:29:f7:
e1:d2:6b:a6:29:b5:bc:d7:c9:e8:61:f5:a8:49:e6:d3:67:b8:
63:3d:4b:a5:d8:21:e8:22:9d:51:48:bf:e6:ed:e7:32:3e:ac:
6f:2c:df:50:47:39:92:95:85:18:9c:2c:34:db:51:86:1a:ef:
2c:57:47:b8:bd:7d:1f:00:03:5a:b2:bc:e1:38:2f:08:1c:4e:
30:3f:97:0e:e5:b6:4b:48:3b:03:c0:d0:79:7d:8f:f4:99:98:
88:c0:0c:99:ce:29:93:cd:79:4d:5b:48:e6:cc:6b:f1:f3:f4:
1c:ed:ce:c1:be:9f:bf:84:9d:e6:77:c9:0a:67:68:4c:80:2f:
39:ff:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:02 2025 by rpki-client