Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: KpPJSw7w/P07AKq8nxLuJ2syIrYO8lQQvI1GlMG2+So=
Subject key identifier: CC:EF:3D:DD:42:59:2E:20:C6:53:5E:B3:51:94:04:80:1D:49:52:19
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 0198D6607876BFD8A33A294C69A3E851FF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: mln/Efb8HMtGiEPwsKdHAtKDZNvjIVZ4q4LTUxPYV7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:78:76:bf:d8:a3:3a:29:4c:69:a3:e8:51:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=ccef3ddd42592e20c6535eb3519404801d495219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:5b:78:49:d7:6e:9c:67:56:b1:21:de:c8:
b5:8e:02:cd:20:7e:75:e1:8d:ac:2a:8e:96:7a:55:
c3:52:8d:44:f8:7a:64:0c:1b:79:57:0b:3f:05:b3:
b9:35:d0:63:a9:3b:32:64:c7:12:88:ec:6b:44:9f:
6e:ed:8d:53:1a:df:d0:1b:88:9f:93:d8:13:3e:d6:
b3:5f:5c:c4:43:9d:ae:03:7c:fd:ed:e9:72:e5:c6:
3a:06:a6:61:59:0c:31:48:ef:8f:4f:b5:68:9e:3d:
c3:8f:3f:8b:c2:53:a2:b6:44:71:92:85:3f:af:0c:
91:be:e5:28:95:b7:c3:99:4a:a1:12:80:39:52:68:
fb:33:38:93:a1:4b:29:2b:d8:20:83:b4:50:4e:f2:
3e:ff:17:fe:ef:aa:b7:e6:e1:7b:90:60:98:fb:3a:
96:5c:2c:89:01:cd:d9:c7:5f:fb:9e:9c:a1:38:4a:
8a:52:c4:7a:11:8f:74:15:0b:ea:fd:44:d9:76:32:
7c:a7:1a:63:e0:5e:43:e2:a3:e3:ee:a0:a0:97:34:
c8:27:a4:8b:c7:e5:ef:6f:4d:98:f9:4f:c5:9d:1f:
50:d9:35:80:5e:de:08:4f:6f:2d:a6:0e:82:a7:87:
0d:26:7c:63:d6:42:c3:aa:5f:b5:6f:ea:4c:8f:b9:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:3D:DD:42:59:2E:20:C6:53:5E:B3:51:94:04:80:1D:49:52:19
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:20:b5:9c:7c:49:6a:29:78:70:07:7c:67:96:75:32:ab:a5:
a8:ed:3a:89:ed:5e:65:07:35:83:83:5e:e8:7c:bf:47:d1:2c:
e9:34:21:2f:f3:55:5d:16:a4:4c:88:41:bd:aa:cf:5e:2a:e2:
d8:b1:1d:7c:00:4f:c8:5d:03:42:c0:6c:37:ea:28:69:2e:c8:
14:71:8d:ee:68:4d:ca:a1:fe:59:54:cc:cf:f7:f8:57:94:88:
e8:19:ba:ce:3e:9e:10:96:ba:11:d4:1a:6c:28:a0:1c:53:fb:
ae:39:26:27:b4:ce:71:a8:42:59:c2:f3:c4:29:72:2d:03:6e:
af:16:69:75:90:72:a1:6d:4a:ac:ce:2d:4c:6c:c8:21:db:c3:
5a:e7:a3:98:ae:03:6a:3d:e1:1b:59:c6:5f:a6:d8:eb:40:8f:
bf:5e:8d:1e:0a:98:39:9e:e4:a1:45:62:a0:b8:d2:47:c1:1c:
6d:08:68:c9:d9:e9:6c:17:cc:cf:fc:a4:8e:3c:b9:5f:ac:cd:
4b:18:d5:6c:3b:64:01:06:ff:db:cb:49:29:16:72:b9:18:e0:
65:a5:2e:66:4e:8d:98:f1:2a:8c:33:a8:66:9a:50:2b:b0:0f:
0e:96:fb:c9:4e:8c:29:a5:ab:b3:40:f7:de:4c:3c:52:74:fd:
43:37:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:52 2025 by rpki-client