Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: BG+7eiAkVxicHBLxxLOGw3mBMgHzY1VFcTOYer2yG8s=
Subject key identifier: 2E:78:83:17:8E:56:26:7D:9E:4D:BA:FC:31:AA:EC:E5:62:D5:0C:8D
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 0197B70E8CA70F9FA150368B11A7650A328E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 107C
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: gFqFrgMZ7Vxd1b3+d3nzJsAn13umxi4e3GyArpwU9/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8c:a7:0f:9f:a1:50:36:8b:11:a7:65:0a:32:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=2e7883178e56267d9e4dbafc31aaece562d50c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:08:7f:07:19:cf:43:a8:84:a3:89:1e:66:
14:fc:ac:48:2b:a4:90:b0:be:e6:9d:1a:b5:b0:01:
de:a5:f3:61:ec:95:f3:12:b3:e2:31:27:32:d4:ab:
a4:f3:ae:37:2f:86:23:6d:df:ea:e0:c7:93:d4:fa:
cd:de:0f:7b:c6:d8:6b:44:2b:a9:f9:90:dd:ce:3a:
e9:98:af:85:6b:5c:e2:3f:77:f0:81:a2:5d:ec:2c:
27:4b:68:56:8f:eb:c7:76:49:a1:3d:91:91:13:e1:
d4:63:2b:aa:bb:bf:ec:4e:42:0f:b9:45:3e:6f:c1:
ee:23:89:d3:61:ea:fe:b1:97:ee:8f:fc:0b:d5:0b:
27:ef:61:57:c7:62:ad:67:c9:53:c5:3a:56:33:c3:
01:51:b5:27:32:2e:8e:76:7f:8a:4e:3d:f2:15:7b:
e4:3f:7f:59:97:86:4a:e8:d6:87:fe:49:02:7b:8f:
ad:d3:79:a5:96:c4:41:64:7d:b3:78:b1:3c:95:f3:
03:c0:42:41:5c:ce:ba:6c:21:79:b5:0a:fc:09:27:
99:e6:ac:87:97:06:eb:38:9a:ef:cc:9f:f4:cb:bb:
24:0d:6d:e9:3f:56:75:b1:0d:4a:a5:62:71:97:67:
ff:d9:9b:e9:fa:34:b4:7d:a7:06:98:1e:c6:63:9e:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:83:17:8E:56:26:7D:9E:4D:BA:FC:31:AA:EC:E5:62:D5:0C:8D
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:51:e1:7b:ce:71:cb:7d:21:27:97:d7:ab:ad:3c:0c:69:d8:
0d:ee:30:de:65:c9:7b:96:aa:a1:ca:08:5a:57:90:c7:3c:cd:
f8:eb:1c:bf:47:cb:c5:b6:23:5d:fd:26:85:aa:cc:38:54:4e:
89:d4:b5:d4:72:d3:5d:98:0f:a7:4f:7a:2e:38:4d:b1:11:44:
59:74:87:d8:1e:bc:7a:71:72:17:0e:22:be:11:d9:71:85:5b:
87:61:82:5c:b7:32:6d:b7:2a:f7:c1:34:e1:b0:bd:20:22:62:
43:87:b5:e9:c9:3c:4a:fd:f1:43:73:09:8d:d6:fd:76:a1:85:
ae:1d:28:6d:7b:f0:64:31:3f:85:51:08:ba:23:7f:24:86:62:
63:95:61:41:49:85:67:50:17:bd:24:96:25:5a:82:ef:d2:12:
65:ca:82:0f:1b:68:8e:ef:e3:60:4d:35:c7:46:4b:89:21:2c:
36:4d:69:aa:63:7d:7c:36:b8:ad:9a:5e:8a:38:14:c3:16:95:
c9:8c:fa:70:40:5e:c7:af:e0:48:4e:39:16:9c:1a:76:eb:20:
a0:69:1a:53:d5:0d:35:25:8b:76:d3:9b:b5:86:2a:75:fd:10:
7e:4d:67:aa:17:b2:9b:24:01:58:22:cc:2d:3b:38:8d:07:8b:
24:7e:cd:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoynD5+hUDaLEadlCjKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjY1ODM4MTM0NDdjN2JkZGViNWEwMWMzMjc0ZDhlNDFj
MzAxYTIwHhcNMjUwNjI4MTUwMTEzWhcNMjUwNjI5MTUwMTEzWjAzMTEwLwYDVQQD
EygyZTc4ODMxNzhlNTYyNjdkOWU0ZGJhZmMzMWFhZWNlNTYyZDUwYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjgIfwcZz0OohKOJHmYU/KxIK6SQ
sL7mnRq1sAHepfNh7JXzErPiMScy1Kuk8643L4Yjbd/q4MeT1PrN3g97xthrRCup
+ZDdzjrpmK+Fa1ziP3fwgaJd7CwnS2hWj+vHdkmhPZGRE+HUYyuqu7/sTkIPuUU+
b8HuI4nTYer+sZfuj/wL1Qsn72FXx2KtZ8lTxTpWM8MBUbUnMi6Odn+KTj3yFXvk
P39Zl4ZK6NaH/kkCe4+t03mllsRBZH2zeLE8lfMDwEJBXM66bCF5tQr8CSeZ5qyH
lwbrOJrvzJ/0y7skDW3pP1Z1sQ1KpWJxl2f/2Zvp+jS0facGmB7GY54SzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC54gxeOViZ9nk26/DGq7OVi1QyNMB8GA1UdIwQY
MBaAFJMmWDgTRHx73etaAcMnTY5BwwGiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZGVjMDYtOGIxYi00Yzc2LWE1NGMt
NjliNGI0ZmI5ZDEyLzEva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZGVjMDYtOGIxYi00Yzc2LWE1NGMtNjliNGI0ZmI5ZDEy
LzEva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFHhe85x
y30hJ5fXq608DGnYDe4w3mXJe5aqocoIWleQxzzN+Oscv0fLxbYjXf0mharMOFRO
idS11HLTXZgPp096LjhNsRFEWXSH2B68enFyFw4ivhHZcYVbh2GCXLcybbcq98E0
4bC9ICJiQ4e16ck8Sv3xQ3MJjdb9dqGFrh0obXvwZDE/hVEIuiN/JIZiY5VhQUmF
Z1AXvSSWJVqC79ISZcqCDxtoju/jYE01x0ZLiSEsNk1pqmN9fDa4rZpeijgUwxaV
yYz6cEBex6/gSE45FpwadusgoGkaU9UNNSWLdtObtYYqdf0Qfk1nqheymyQBWCLM
LTs4jQeLJH7NFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:00 2025 by rpki-client