Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
File: kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft (raw, json)
Hash identifier: bBZn090J3v1s5kKlhXBeJf3u1RUUvy/ZbubUU3Td/eQ=
Subject key identifier: DB:29:C7:78:DE:44:A6:CC:75:82:6D:39:F6:E4:AD:D2:E3:36:E9:9A
Authority key identifier: 93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
Certificate issuer: /CN=932692e8eb740235501c11080900858e332f1060
Certificate serial: 0198D73BE2985D20AEA79C5DC974EAE0EE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
Manifest number: CC
Signing time: Sat 23 Aug 2025 14:01:22 +0000
Manifest this update: Sat 23 Aug 2025 14:01:22 +0000
Manifest next update: Sun 24 Aug 2025 14:01:22 +0000
Files and hashes: 1: kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl (hash: McpWDRBYq/H0VqAs7gJymn94OxgCD/Aqvm9bkyJ4ndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e2:98:5d:20:ae:a7:9c:5d:c9:74:ea:e0:ee:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932692e8eb740235501c11080900858e332f1060
Validity
Not Before: Aug 23 14:01:22 2025 GMT
Not After : Aug 24 14:01:22 2025 GMT
Subject: CN=db29c778de44a6cc75826d39f6e4add2e336e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:3f:81:fe:74:ab:f7:34:53:4a:70:8a:ff:
a3:53:d7:6a:08:cc:20:63:47:52:af:b1:ee:a0:19:
1c:29:28:6c:72:0a:96:12:ad:6f:da:1d:38:d6:8a:
61:a8:a4:ef:1b:62:66:71:35:fa:1c:56:6b:d3:16:
66:ea:48:dc:13:1b:ed:23:30:5d:ea:cb:ff:c2:46:
d8:51:bb:d0:87:0e:ea:26:85:f7:f7:e4:81:2d:38:
8c:bd:a3:a9:96:c0:5f:03:de:48:55:25:2c:04:3f:
0f:e4:ff:98:d7:ae:8e:eb:7a:d5:f6:92:e2:77:11:
71:c5:52:ea:2d:19:9b:12:10:b1:1d:1b:96:ff:f6:
70:79:a3:64:d6:39:66:4f:22:cc:51:c4:8f:97:c9:
8f:6d:88:09:2d:33:75:7c:93:9c:4e:77:6e:3d:ae:
6e:62:59:89:9a:ea:bb:75:b4:53:18:0a:ab:5e:8f:
ff:f2:2d:d3:b9:36:3f:3b:a3:0c:c8:88:52:ca:5c:
7d:07:21:ed:4a:91:83:d3:94:6c:35:e0:ea:e1:89:
29:3c:62:7d:a8:d0:cd:9a:b0:a9:38:95:99:a3:b3:
05:a8:73:4f:40:7c:eb:9a:f6:f2:c9:8b:57:18:6b:
dc:ab:eb:9f:59:69:99:8f:3b:8c:77:c2:21:78:db:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:C7:78:DE:44:A6:CC:75:82:6D:39:F6:E4:AD:D2:E3:36:E9:9A
X509v3 Authority Key Identifier:
keyid:93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a6:d8:f2:c7:9d:6a:30:07:80:f5:81:f2:ed:63:f8:93:58:
66:42:f1:46:09:3f:4e:72:9f:59:9a:37:49:0e:55:bf:df:82:
01:e7:b8:1c:53:db:24:f0:ee:57:55:d5:26:e4:84:46:1a:b8:
9f:d6:05:c9:7a:0c:e6:d2:b7:df:a6:c0:9f:d2:be:ed:22:3b:
53:6d:d5:ca:05:a7:c2:b0:6f:bb:0a:d8:80:5f:4b:e6:4d:b0:
52:9a:78:a8:7d:56:d6:c6:49:9b:71:72:f2:22:cd:0c:d7:47:
3b:1d:49:f3:72:fd:79:c8:1a:f7:e8:4b:6b:c5:2a:8d:ee:fb:
cc:9c:21:43:23:b6:0a:e8:19:f9:72:b1:58:8a:f9:ca:c2:86:
b7:05:da:62:fb:12:2a:42:05:c6:ba:cc:94:8a:63:23:03:66:
6e:46:5d:0a:c9:e3:85:0f:7a:9f:a7:cb:c0:3a:e5:e8:ae:bd:
3f:87:19:d2:7b:1e:fb:86:c5:25:3e:8e:1f:c4:a0:78:ec:a9:
aa:48:ff:ed:2a:8f:27:f1:d0:f1:3b:3a:69:b4:cc:3f:5d:a8:
ce:a2:72:e1:d3:b5:59:a8:d9:c9:8d:d7:4b:2b:ca:35:7b:7a:
2e:f9:3d:55:85:08:5f:df:44:df:cd:48:a2:2e:b8:9b:20:8e:
70:ee:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:14 2025 by rpki-client