Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: Ccro5jvG6t8fdsCXVUkxgbEb9a7jvgQEFyJ0nXF9JHc=
Subject key identifier: C3:DD:10:69:17:C2:DA:4C:0D:FB:D1:F3:A8:6B:8C:09:3E:0F:1F:36
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 0197CBDF013348472EE464473C575C35E3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 1328
Signing time: Wed 02 Jul 2025 16:01:19 +0000
Manifest this update: Wed 02 Jul 2025 16:01:19 +0000
Manifest next update: Thu 03 Jul 2025 16:01:19 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: NN+tmSzw/d1Mb+Kn/fheNV6zSEYvTpa2PANOq8Wt6Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:01:33:48:47:2e:e4:64:47:3c:57:5c:35:e3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Jul 2 16:01:19 2025 GMT
Not After : Jul 3 16:01:19 2025 GMT
Subject: CN=c3dd106917c2da4c0dfbd1f3a86b8c093e0f1f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:f3:fa:cf:58:7f:21:64:b1:70:e9:1c:61:
c5:8d:52:97:6d:b7:18:4a:ae:0c:6a:ed:d6:86:67:
96:ac:fb:13:38:68:fc:b0:cf:90:6a:e1:bf:63:f2:
38:fc:b1:cf:45:d9:e8:84:08:87:59:cc:92:4b:46:
9d:d3:27:27:19:54:ac:9c:a9:4f:99:41:65:08:ca:
4d:4d:70:ba:bc:a1:d7:55:d8:b3:9a:57:87:07:b1:
83:38:10:3f:f6:85:31:52:5e:9d:93:4d:ea:8b:15:
88:3e:78:c4:a0:27:24:34:b6:4e:d6:16:1d:2b:22:
26:7d:cb:b3:eb:53:69:25:31:64:1a:7c:b7:be:fa:
42:1d:42:93:dd:d8:74:3c:8a:e4:35:6e:45:52:59:
9d:51:4e:63:5a:f4:e8:d2:2e:33:96:37:8e:4a:a8:
f0:27:57:ef:58:90:ba:d3:35:74:89:96:3e:4e:fa:
ca:98:46:34:60:39:8b:94:59:75:2f:a1:66:d5:e7:
76:f0:c2:6f:d2:19:9c:8f:1c:55:30:f2:c9:8d:56:
d4:e4:a5:99:0a:1a:2f:00:da:a9:a6:25:54:2f:50:
d8:78:71:f9:a3:61:67:46:b6:1e:31:24:54:31:48:
69:d2:12:fc:1e:3c:7a:6a:5c:2f:67:71:11:04:b1:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DD:10:69:17:C2:DA:4C:0D:FB:D1:F3:A8:6B:8C:09:3E:0F:1F:36
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:5c:c8:3e:bc:ef:8c:c3:63:4b:54:95:43:91:b3:cb:05:
77:95:54:dc:47:cb:34:11:ab:b7:2c:41:dc:c4:f7:e3:1f:ec:
e7:94:22:1c:d2:48:6f:bd:99:56:b1:c8:23:87:46:91:a5:08:
ef:28:97:09:5b:1f:1b:9a:8c:1c:47:7f:b1:bf:01:b7:6d:0f:
ce:86:90:af:f5:93:37:54:dd:a2:68:00:e4:9a:f8:6a:fa:79:
4f:a0:c7:c4:64:33:0a:54:4e:f1:6c:95:36:2c:bf:6e:97:4f:
d8:63:5c:8e:8d:e5:22:c4:dc:d8:d5:27:66:5d:01:bb:17:7b:
db:c1:d1:77:cc:e4:52:3e:06:08:b0:28:e5:5c:db:87:ef:4a:
8f:51:7a:c3:37:d3:b6:98:fc:5d:c1:7e:c6:49:4e:c3:28:03:
6d:f4:68:5b:55:b8:92:37:07:4c:a5:d0:37:5e:37:30:97:bc:
a4:ce:49:92:8e:1c:13:0b:62:6c:46:87:92:af:1f:53:c9:8a:
59:2c:1b:65:31:3c:5c:be:ff:47:7f:2a:d8:11:b2:5d:24:67:
2a:0c:ea:80:46:91:c4:56:44:75:20:7e:85:5c:8f:dd:44:cd:
5b:fa:09:9a:8a:4c:eb:d9:b8:94:2b:c8:63:9a:ed:ce:c6:2c:
58:35:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:08 2025 by rpki-client