Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: CK3ulPdeNDLM8pnU9HJSEvjMVQ9lafeP9Vk4EfcDWYs=
Subject key identifier: 3A:46:35:D5:E9:72:1C:36:62:52:12:A6:03:97:BC:04:25:7A:7A:CB
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 0197B77C6DC7A8F937289AB72E9625F592A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 10B9
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: F2wdfqSxImn/g2FKEJ9BbO6x/6LF8gVcJmTO8rol13k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6d:c7:a8:f9:37:28:9a:b7:2e:96:25:f5:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=3a4635d5e9721c36625212a60397bc04257a7acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:8a:b2:b2:f5:3e:47:55:23:25:65:bd:fd:
9f:25:1d:9d:9c:32:8b:e7:b8:dc:27:b4:92:c4:ad:
c8:98:63:46:ea:e9:76:bf:54:44:f5:b6:f4:a4:1a:
c6:4c:e4:70:fb:1c:25:8c:de:fc:ad:21:b0:de:28:
b5:84:78:7d:67:ff:9f:44:23:65:c2:04:46:c2:7d:
fa:45:c5:8a:c1:71:b9:38:3c:75:72:b6:63:76:3c:
2b:6f:76:8e:f2:98:5d:88:1c:04:e5:c1:e5:a4:c6:
3a:be:73:1a:15:86:01:a6:85:fc:09:51:4f:aa:db:
2c:b9:c7:a0:9b:e8:4d:cb:4c:be:25:1b:2a:a3:7f:
67:02:66:a1:2c:9a:24:c3:6b:56:8a:91:a4:5e:c4:
4d:ad:d0:f1:81:41:81:37:ca:6e:81:f5:81:4f:e9:
b8:4f:1f:62:57:e7:5e:97:20:8d:2e:20:f3:85:e1:
55:f7:76:9d:3a:62:a4:2a:e4:d9:20:7a:19:c9:83:
fc:46:56:f5:2b:69:ac:0c:69:97:be:81:27:e7:7b:
96:63:e9:db:00:5a:11:1f:8b:93:50:d6:d7:2c:52:
3c:81:a1:d0:d2:d7:86:41:63:99:a0:cf:dc:74:c9:
1b:da:58:54:b8:53:df:b2:2f:fe:3d:11:d5:1d:47:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:35:D5:E9:72:1C:36:62:52:12:A6:03:97:BC:04:25:7A:7A:CB
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:49:15:50:97:26:91:9d:9e:91:4f:d4:51:8b:ad:91:4c:4f:
de:89:bc:36:02:e0:61:70:0d:f9:e1:6d:31:df:33:27:cc:42:
18:a5:be:ba:2d:59:23:a4:7f:8c:cf:bd:35:9a:f4:c3:42:68:
04:bc:2b:47:f5:e7:a3:2e:56:61:e7:6a:ea:59:fe:af:85:81:
90:be:e8:55:9f:0d:1b:06:bd:18:d0:4a:7b:14:32:0f:20:ee:
42:91:de:c1:ff:8a:d6:7d:8d:8e:04:57:aa:2a:71:92:ee:c6:
b4:15:b9:bf:3f:aa:43:6b:56:d3:ed:74:af:3d:26:4b:92:51:
ce:db:2e:ab:c0:f8:30:2c:b3:a8:19:f9:9a:ed:39:07:dd:49:
bc:f7:41:64:84:6c:de:b7:c1:5f:ff:40:4f:bb:f8:0a:5a:25:
f7:c0:2e:8f:f5:af:42:95:d0:e7:e1:b3:ee:93:87:ff:5b:c7:
ff:6b:48:9e:79:67:a3:eb:49:4d:3d:5a:bb:6a:36:96:36:e0:
c7:31:e5:7f:78:d3:e9:b8:f2:45:58:9b:6f:ec:3e:0f:b0:00:
0f:0d:9d:72:39:be:d9:aa:c8:69:3d:d7:73:d1:ee:4a:40:cf:
11:92:b0:55:07:f9:ba:98:fe:28:23:7d:fa:28:72:7b:5a:46:
af:5f:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:18 2025 by rpki-client