Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: koxXW1XoY8deykikA4u0+37MNjdovCv1nEK99jBp1ho=
Subject key identifier: 71:EF:4E:58:6D:75:9D:9C:B5:BA:97:2A:48:C4:59:A5:C9:61:E9:B0
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 01989713A3DB82871BA98CA5C2F48C09503E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 03:01:43 +0000
Manifest this update: Mon 11 Aug 2025 03:01:43 +0000
Manifest next update: Tue 12 Aug 2025 03:01:43 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: /EZJyRdeERo4aAVirbB/7Xf4pufR1BjdqdmgjEUaJRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:a3:db:82:87:1b:a9:8c:a5:c2:f4:8c:09:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Aug 11 03:01:43 2025 GMT
Not After : Aug 12 03:01:43 2025 GMT
Subject: CN=71ef4e586d759d9cb5ba972a48c459a5c961e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:b6:35:da:d8:6f:e4:db:b6:ef:99:5a:73:
9f:6b:09:98:9e:b6:b9:40:21:f9:89:0d:d8:64:95:
61:a4:1f:e0:36:8b:6f:16:48:a9:92:2c:e1:72:24:
5f:4a:e3:25:4d:88:5d:2f:0f:ce:e5:6f:7f:68:fc:
9e:b7:cf:1f:47:a2:e8:f8:6c:26:42:ab:2d:b5:c2:
4f:9f:42:c4:89:98:48:b3:7e:67:14:fc:30:bf:2f:
8a:ea:96:9e:2e:1d:30:21:37:1c:ee:2e:c7:1b:5e:
c5:3a:cf:0a:b6:28:a9:f9:bb:be:e5:0a:af:1a:20:
2e:e6:1f:b6:72:d7:a0:63:80:1a:9d:c4:3c:52:6f:
9f:f4:5a:a0:d6:f0:d7:83:b8:d0:f4:0b:18:91:2a:
11:ca:95:e1:e2:e2:19:8d:64:21:b1:4e:fa:25:36:
44:83:b2:fe:94:43:a3:c8:f3:68:96:dd:5d:ba:72:
9f:18:12:be:fd:f1:cd:15:de:3b:78:8d:51:35:d2:
3f:7f:4e:b2:98:fb:82:a4:f1:48:82:0f:7b:58:06:
d8:64:06:44:e3:fc:61:c4:44:d2:ce:1a:05:23:b7:
3f:d1:a0:d2:4b:b7:c5:cc:87:50:fc:94:36:5e:04:
71:5b:af:2c:e6:99:ed:70:13:dd:74:c0:c9:d0:9e:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:4E:58:6D:75:9D:9C:B5:BA:97:2A:48:C4:59:A5:C9:61:E9:B0
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9f:81:f4:ea:04:e5:7b:4a:70:89:27:f1:50:67:49:e3:eb:
48:24:8f:57:39:70:66:83:a9:8f:94:07:89:30:76:d3:7c:27:
08:4f:f5:f2:b7:28:82:bb:ac:d8:bc:df:fc:d2:84:ca:d1:79:
3e:c6:70:7e:4d:24:eb:04:1a:ce:63:2a:86:32:15:55:5d:4a:
b5:be:90:40:0e:f3:cc:4a:bd:d5:a1:9e:41:98:5d:9b:f1:1e:
89:f7:b6:9d:c9:80:49:f7:21:2f:7c:68:7e:8d:5a:18:97:b1:
41:c3:5d:2f:61:46:4f:99:ee:23:61:ff:8f:88:c1:e5:eb:ef:
f4:b7:17:bb:d6:be:47:ea:fe:e6:bc:44:d7:49:1e:a2:b4:2f:
ba:9a:c5:2c:3a:da:9d:bb:ac:b2:fa:de:b3:51:82:66:42:9d:
b9:57:21:e7:ed:3c:04:39:ce:5d:8d:d0:71:c1:ff:62:e6:14:
12:a0:ca:31:e5:fa:34:3a:ac:d1:90:71:d4:68:1f:0e:13:ff:
96:4a:be:e7:a3:08:4d:48:76:85:cb:d2:6c:e4:50:3f:d6:4e:
2b:63:0b:27:d0:6c:ea:36:43:a3:9d:7c:26:50:51:b9:c6:97:
b9:77:4b:35:83:10:32:8e:0b:9f:d8:e3:b5:ab:fb:f7:8c:98:
3e:b3:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:38 2025 by rpki-client