
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: 7YTCsZspWy5VuXFs3XnbJhOxZ9wU5+cNpgnTCKZZ5VI=
Subject key identifier: 30:D9:95:48:37:43:9F:B0:25:71:E1:A6:EA:51:76:10:36:B3:03:A6
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 01988BB32D5E6E3836A7376BBC19E084A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 22:00:32 +0000
Manifest this update: Fri 08 Aug 2025 22:00:32 +0000
Manifest next update: Sat 09 Aug 2025 22:00:32 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: u6yF1SYbvUrGIIRQHlCtNTAgN7N61vFzwp/z+yQjJTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:2d:5e:6e:38:36:a7:37:6b:bc:19:e0:84:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: Aug 8 22:00:32 2025 GMT
Not After : Aug 9 22:00:32 2025 GMT
Subject: CN=30d9954837439fb02571e1a6ea51761036b303a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:29:2a:d9:1c:ad:e3:8c:9c:c9:00:b9:23:
34:46:03:c1:1f:69:64:6e:3d:1d:ab:a3:7e:70:b7:
a6:e9:e2:02:9a:88:2c:3f:96:14:fb:79:a9:88:a9:
99:ae:ff:80:3e:8c:cf:a2:a5:8e:9a:30:9a:ee:55:
3c:ba:12:80:c3:25:19:26:e9:13:3c:2b:40:55:45:
44:75:4f:69:b0:fa:cc:18:a3:9e:37:10:15:ac:8e:
3a:7b:37:b8:bb:94:d7:07:ef:24:81:bd:cb:49:9d:
3a:4f:9d:2b:9c:9c:06:5f:38:6f:a4:27:d1:61:1f:
6b:0b:c7:c4:62:67:d4:73:30:7f:fd:e7:28:d9:6d:
40:35:55:27:1d:c3:43:47:e7:48:5d:5f:64:c9:6b:
28:0f:44:a5:2f:86:fe:aa:43:95:53:18:47:9f:d4:
0a:6d:cd:e2:a2:f2:5c:44:c1:90:52:ae:7a:6d:27:
56:02:e7:6f:4a:68:db:6b:5a:05:c2:55:07:a7:e0:
e1:da:43:4e:03:fe:ba:e1:b8:70:47:87:c6:7b:6a:
3d:5a:8a:b1:04:39:6f:9d:6f:5b:22:0a:3e:f9:50:
0c:17:d8:3a:43:58:56:29:95:06:1a:61:7a:f5:98:
00:83:36:21:df:de:43:3a:71:d2:83:0b:64:ca:c7:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:95:48:37:43:9F:B0:25:71:E1:A6:EA:51:76:10:36:B3:03:A6
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e9:72:a0:f2:55:7c:77:3d:f8:e0:cc:4b:fe:2a:fe:7b:86:
be:a2:6e:aa:11:cb:4a:07:b4:37:7f:e8:f5:7b:7f:96:23:f4:
74:31:2c:09:42:2c:ac:c5:40:e4:f6:20:70:8b:cf:87:70:96:
85:19:63:a0:4f:9e:20:70:36:cc:b2:41:81:16:f2:d7:f6:55:
07:72:cc:ab:2f:8e:c0:dd:b6:68:9e:f9:51:dd:58:27:3e:60:
a1:40:9d:da:6a:e8:a7:53:68:68:44:f0:c6:98:ae:ac:47:8d:
41:5f:4c:37:6d:4b:33:ee:aa:07:ff:98:45:35:2c:38:61:f3:
44:9d:26:38:75:d9:54:e2:6a:81:be:97:a8:38:88:e7:ea:45:
ab:ff:18:50:65:52:4f:d4:f3:9e:2d:26:49:9a:11:8c:d2:d2:
88:2e:e7:d8:31:bb:35:eb:6a:b4:69:29:c0:8d:60:12:f8:78:
66:91:a7:96:29:34:a0:87:7a:35:22:33:5d:3e:3b:8e:73:25:
bc:70:38:95:7a:92:a3:66:9e:28:ab:cd:d1:8c:1a:0c:4e:c4:
9e:bb:37:0c:1c:d6:08:65:7f:b8:46:fb:d8:22:01:99:36:6c:
87:af:da:04:f6:8a:1d:da:87:e2:eb:8c:ec:74:cf:2b:12:4a:
eb:f1:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:25 2025 by rpki-client