Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File: k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier: Qg//CxOTXo20q1jxDpmT7vBMIp9h6zv+IWDYcHRCRfQ=
Subject key identifier: B4:AF:8E:B9:AC:45:37:7D:AB:8B:83:8D:DD:49:5C:31:A2:88:20:90
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 01987B9D5A9AAD6D5ACF55902A5F6F28C506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:02:46 +0000
Manifest this update: Tue 05 Aug 2025 19:02:46 +0000
Manifest next update: Wed 06 Aug 2025 19:02:46 +0000
Files and hashes: 1: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: hlOzjmbzS7jC8VXZFrSKZAZtNp/QzhfGQleu7Hoyc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:5a:9a:ad:6d:5a:cf:55:90:2a:5f:6f:28:c5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Aug 5 19:02:46 2025 GMT
Not After : Aug 6 19:02:46 2025 GMT
Subject: CN=b4af8eb9ac45377dab8b838ddd495c31a2882090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:c0:6a:d5:b2:a6:e5:37:72:c7:a0:b8:77:
f5:3b:1b:f2:bf:45:7f:f5:2a:be:b2:0d:b5:da:df:
6e:a9:4e:db:8b:1d:7c:73:83:6f:38:84:0d:bf:db:
59:d5:0b:74:ac:f1:d6:6d:0e:73:c2:34:8d:a4:d1:
d7:28:48:61:81:72:b7:e0:be:3d:e0:79:86:60:22:
c7:2a:a4:a8:cb:9a:52:99:9a:aa:f4:40:af:d8:00:
72:ab:e4:7d:52:11:65:32:68:30:18:3a:e3:04:0c:
8d:f9:01:1a:a5:3f:a3:60:97:c3:44:5f:1d:6b:90:
d5:36:2a:f3:5f:fa:2c:49:dd:aa:d2:52:16:70:c7:
72:04:89:18:07:80:23:a7:b0:0e:72:ca:0e:ec:67:
78:31:65:ff:e4:b4:b8:5b:06:65:0e:81:01:bf:2e:
19:90:3d:3e:0e:b2:0e:3c:f0:bd:0c:7c:04:6d:da:
ab:87:8c:c0:62:dd:47:0b:7d:64:17:29:ec:78:2e:
a0:2e:57:3f:a8:54:cc:91:19:04:55:a3:5b:80:8b:
95:c1:44:75:57:c1:11:9f:fe:76:5b:90:36:89:d6:
49:4d:c1:74:6f:ed:2b:b2:a2:78:0e:b7:48:c8:aa:
91:17:ea:cd:5f:76:1e:91:0a:3e:34:25:7b:3b:48:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:8E:B9:AC:45:37:7D:AB:8B:83:8D:DD:49:5C:31:A2:88:20:90
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:4a:69:99:53:1f:85:4e:6b:6a:62:2f:02:0c:16:21:6f:
fa:0c:ac:e0:1a:68:09:0a:58:8f:2a:81:37:6e:86:12:ce:e6:
f0:a7:15:b3:5c:aa:b4:53:4c:dd:58:8b:9b:3e:78:ec:4c:bf:
60:83:d9:48:14:9b:33:c5:68:91:d8:d9:13:51:fc:be:f1:ed:
f1:99:d7:ad:57:c0:f6:69:24:43:99:36:ec:bc:db:af:4a:44:
b2:46:11:92:97:97:4d:47:e0:f9:8a:86:f6:33:b3:97:53:85:
fa:72:e1:fe:de:86:72:df:2c:fb:02:af:31:a8:64:a3:a0:76:
a6:0d:52:af:f1:06:d5:a8:e6:3f:72:a5:3a:23:96:68:92:b5:
70:6b:12:e9:9d:35:38:f9:fc:03:8e:f4:3c:12:d3:0b:82:35:
96:c5:1a:6b:df:47:b0:af:6a:e7:cd:15:12:4c:30:91:d7:c3:
06:f6:56:c2:f6:e3:59:cd:14:d2:2b:b5:8a:da:3c:39:52:68:
97:72:cd:35:48:f5:8a:50:3c:91:fa:48:e7:0a:66:e8:54:17:
9c:3c:10:2b:0c:26:2c:3d:e8:a0:0d:d8:74:9b:2a:c6:e6:bf:
07:7c:d6:95:89:ce:f1:96:b2:83:3f:d5:9b:48:bb:60:11:80:
bd:7f:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:45 2025 by rpki-client