Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
File: kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft (raw, json)
Hash identifier: xAzP5LUQ/KLP7yzuzXKBSR7AINUln+gIFYhILsYK96k=
Subject key identifier: B8:06:1D:2D:7D:96:21:87:29:69:9B:E8:5C:8A:A7:70:F0:51:71:97
Authority key identifier: 93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
Certificate issuer: /CN=932692e8eb740235501c11080900858e332f1060
Certificate serial: 0197B77CBDD52729FA43FD3C9AA39399177D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
Manifest number: 37
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl (hash: uXeycHp1pHWDdFwocAVrmNqttBgG1UXAteouTL+yfik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bd:d5:27:29:fa:43:fd:3c:9a:a3:93:99:17:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932692e8eb740235501c11080900858e332f1060
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=b8061d2d7d96218729699be85c8aa770f0517197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:87:7f:2c:02:b6:2d:5e:d9:a7:64:54:31:
a5:7e:e0:a9:9d:d8:4d:21:f8:58:8d:34:64:55:bb:
b1:48:41:cf:9c:d9:2c:0e:fd:a2:82:b0:ce:92:95:
57:64:50:f0:b3:0d:2e:3b:24:7c:7f:99:9e:7e:85:
64:85:55:07:6c:b2:88:77:32:2e:68:2c:ec:c0:5d:
4b:1c:31:75:0c:70:fd:48:76:45:f6:84:6b:c0:d7:
ba:11:5d:56:d2:01:0a:a7:81:09:34:91:d9:9c:c3:
92:9b:ea:e4:8f:6b:ca:f9:fd:b2:37:26:6a:b1:58:
b5:c6:c6:fa:07:f0:31:d0:fe:65:4f:8d:68:26:38:
00:c7:10:6b:f9:db:be:f9:b4:c4:b4:3e:5d:cc:7b:
a5:d9:be:6c:55:91:f0:7b:87:04:44:84:14:19:a2:
5b:c0:f9:85:9e:cf:d9:d6:81:dd:d1:8a:bc:5e:c8:
e1:fe:24:b3:98:dc:59:32:88:22:ba:33:9a:31:f4:
49:99:a8:76:a5:30:ad:ff:03:ba:9e:8f:b6:fc:af:
56:e2:b4:f7:ba:d2:af:92:bd:81:12:62:75:1b:c1:
45:80:36:3f:a9:b4:50:d8:3b:d0:5c:55:80:f9:ec:
25:b8:68:cc:e1:c2:ce:0d:b3:94:34:ac:8a:13:60:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:1D:2D:7D:96:21:87:29:69:9B:E8:5C:8A:A7:70:F0:51:71:97
X509v3 Authority Key Identifier:
keyid:93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:01:ba:12:89:84:b4:0e:6c:15:d0:dd:d3:86:6d:a1:9e:0e:
e1:2d:ba:ec:25:69:5b:9a:1e:ae:0e:be:2a:e4:df:de:1f:e5:
30:bb:b9:78:a1:f9:f4:a6:cc:eb:29:04:11:2d:54:92:70:fa:
fe:62:0b:d7:b8:43:f1:fe:36:a6:76:71:0e:ff:ac:de:c3:e8:
7e:dc:95:c0:ec:a1:14:a2:a0:be:19:19:71:02:69:85:10:34:
30:90:f3:18:41:32:a2:a0:9c:52:98:df:c6:35:9b:13:1f:00:
77:3a:04:8b:2f:1f:61:27:73:ed:04:c6:7b:74:e0:9a:2f:52:
2b:43:ed:54:0a:89:8d:dc:85:a5:1b:a4:db:c6:de:85:1b:68:
bf:37:77:dc:89:2a:0a:89:54:6b:db:a7:66:2d:d7:aa:51:f1:
8f:d8:b7:c6:31:db:ad:df:c9:4b:84:17:d8:f5:4c:a0:45:26:
df:42:85:a5:24:82:0d:e5:d1:9a:80:c9:7f:90:e6:70:6d:59:
5e:3a:fb:f6:fd:29:ee:11:2d:a1:b8:e1:f6:0f:31:7f:3e:40:
85:4a:cd:da:f7:d4:c2:59:12:ca:0a:3e:cd:33:d3:35:09:04:
a2:8d:2d:f2:30:21:78:8e:f0:f5:c8:f7:18:5a:05:8e:2a:ec:
eb:13:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client