Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
File: kWV5napb3fL1Nt2BtybPrtDmCFs.mft (raw, json)
Hash identifier: MtsSCcmEhwcFkmlT8rgW2JOgX5YECEvRHGMD/LJY73g=
Subject key identifier: 0F:A5:01:1C:76:F5:02:88:FE:E2:07:34:18:6F:D9:AF:13:DD:67:31
Authority key identifier: 91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B
Certificate issuer: /CN=9165799daa5bddf2f536dd81b726cfaed0e6085b
Certificate serial: 019778D4DAA93FB57989E87F2806BF38404F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
Manifest number: 0E
Signing time: Mon 16 Jun 2025 13:01:44 +0000
Manifest this update: Mon 16 Jun 2025 13:01:44 +0000
Manifest next update: Tue 17 Jun 2025 13:01:44 +0000
Files and hashes: 1: kWV5napb3fL1Nt2BtybPrtDmCFs.crl (hash: UY94rFNlH4d5z5vEUxSkQNOsW8btDS+KBJYPF09jRHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:da:a9:3f:b5:79:89:e8:7f:28:06:bf:38:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9165799daa5bddf2f536dd81b726cfaed0e6085b
Validity
Not Before: Jun 16 13:01:44 2025 GMT
Not After : Jun 17 13:01:44 2025 GMT
Subject: CN=0fa5011c76f50288fee20734186fd9af13dd6731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:1d:be:c4:45:c5:b4:3e:fd:9d:fa:5c:4e:
6a:f9:00:25:d0:1a:13:f3:a5:72:69:be:ec:b7:01:
e4:39:04:21:1f:71:26:c4:c1:9f:2c:99:5d:b3:a5:
db:3c:fe:48:fd:ef:f0:53:75:5d:3e:09:d4:b4:f5:
94:ce:f5:0a:87:2d:f9:71:b0:87:93:bc:bf:63:0b:
c8:96:ce:90:5e:74:8d:4e:88:f7:ac:bc:e7:f7:11:
08:df:8f:67:4e:29:fd:59:e0:1e:e7:c9:04:c5:4f:
8b:e4:6a:36:62:77:ba:03:d5:d4:17:66:83:ba:af:
90:7f:84:a4:c9:41:a8:e1:70:1d:38:17:d8:8e:28:
ef:6a:93:03:98:09:94:c2:9a:f3:c2:87:78:a2:d2:
2b:28:87:d5:ab:37:de:a9:6b:b1:11:2c:b5:d8:cf:
05:08:55:50:9f:36:9d:4f:e9:6f:c0:98:b4:7a:d3:
57:28:52:53:f7:f7:bb:bd:6d:3d:a3:34:73:37:39:
21:99:7d:16:cd:94:b0:6e:63:2a:ec:b1:b3:38:12:
87:a0:ec:ef:d2:28:3d:6b:e1:24:27:17:81:2d:df:
b2:71:14:0b:13:1c:07:f5:d7:7c:15:f3:0d:71:03:
33:05:e6:b2:85:6b:03:03:7b:52:78:9a:8c:ad:a9:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A5:01:1C:76:F5:02:88:FE:E2:07:34:18:6F:D9:AF:13:DD:67:31
X509v3 Authority Key Identifier:
keyid:91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:1b:f7:07:73:4b:46:0a:a8:01:7c:9b:2c:60:4c:1c:9c:
cb:c3:67:9d:9a:51:a3:43:0a:8f:10:3b:98:49:e2:77:0b:b5:
c6:ef:ca:00:cd:c5:2a:1d:cc:38:69:d0:98:f0:a0:b7:0a:74:
5a:f4:21:c9:12:57:2c:0d:57:07:15:95:83:e2:33:85:b8:c6:
4e:84:a7:b6:6d:c6:2d:36:83:68:cb:a5:ae:2b:f7:a1:8b:2d:
15:36:40:e7:67:ab:56:a9:5c:f4:30:fc:6c:45:79:4a:50:62:
b2:68:9e:90:98:03:b0:89:f0:1f:d0:7b:8a:83:c7:56:98:b8:
10:c9:c3:76:93:c8:45:69:d4:2a:cd:60:8b:0a:fc:aa:6b:9e:
ed:74:71:08:54:2c:a6:c2:fa:6d:7b:a9:bd:3a:32:bc:f9:bb:
05:ac:ca:3f:23:8f:c0:a2:04:41:91:21:f3:12:72:02:65:94:
52:66:88:02:8d:53:7b:35:fc:aa:10:47:5e:94:fa:36:29:9b:
41:f0:53:7b:ed:23:c8:4a:b6:6d:4e:40:c7:ce:26:97:27:8d:
78:86:44:88:0e:3b:19:33:48:71:05:15:cf:bb:e1:b9:58:38:
97:10:6c:48:a1:19:56:74:16:99:ac:90:aa:8d:56:33:8d:b4:
3c:97:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:58 2025 by rpki-client