Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File: kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier: r0bBrUVnPW/1ihg9a9OqFobuLWm4pE6AI7x+gaKl9RI=
Subject key identifier: 90:D1:5A:28:04:2A:E0:89:ED:23:71:A7:61:F1:4F:F4:C3:A9:EC:E3
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer: /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial: 0198D65F9CC0D2E04D1D203DA1BF5CC906D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number: 1256
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: +Yi2uhJ/9Tc9cNTqYn7UvTXfnvZWgtkhNeexMWWQh6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9c:c0:d2:e0:4d:1d:20:3d:a1:bf:5c:c9:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=90d15a28042ae089ed2371a761f14ff4c3a9ece3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:ec:47:01:02:9e:9e:21:bd:2f:43:c6:f2:
46:49:44:de:c8:94:6a:84:84:b0:b8:6e:40:c2:a1:
98:52:10:0b:dc:41:13:51:76:ff:00:15:ca:62:f6:
02:54:65:e9:c0:36:1a:1e:f0:61:63:e4:cc:e3:69:
bc:a3:b0:9b:a1:95:7f:87:46:71:fc:9c:d6:7b:b5:
25:2f:3a:66:a3:1a:1b:74:88:3d:44:cd:4e:28:3c:
ce:7a:87:0f:47:e1:17:85:3e:e7:78:2f:6a:30:51:
bf:2d:6c:7c:ec:8a:33:3a:45:2d:a0:76:f8:be:d0:
85:e4:c1:0c:c6:08:ab:9c:2c:98:43:69:e3:f1:21:
65:42:5e:c3:e0:33:60:f3:93:a8:b2:eb:9d:fd:22:
79:53:ab:5b:0d:6d:f4:50:41:0c:97:30:57:1d:b8:
c2:3b:ba:08:d8:6f:11:e6:21:bd:ae:4e:2e:e2:93:
6a:1c:96:13:4a:26:2d:ee:9e:33:c0:67:d1:7f:5e:
f4:8e:ae:ff:41:4e:04:0b:7e:50:41:d1:fc:95:a3:
6b:04:75:bd:33:bb:50:77:a3:77:48:f9:5d:0f:1c:
14:36:d2:7c:da:98:d0:45:d5:95:0c:15:5c:90:ef:
55:39:6f:81:67:90:e9:71:f2:84:e3:ae:9f:66:ed:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:5A:28:04:2A:E0:89:ED:23:71:A7:61:F1:4F:F4:C3:A9:EC:E3
X509v3 Authority Key Identifier:
keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a6:7c:c7:4e:c4:bf:7b:9a:7e:b0:56:41:16:86:ce:fc:e8:
7c:53:10:04:8c:39:78:8f:67:ab:e0:6c:d1:72:b9:3a:b8:ca:
cc:cd:33:f5:d9:97:02:75:83:fb:ed:1c:ec:5b:b6:d7:67:02:
e5:13:7a:57:b1:d6:6a:0f:a9:87:8b:d0:de:69:a6:f4:3b:f7:
7d:48:32:6a:7a:1c:fa:77:cc:b7:15:7b:38:ae:2f:29:5c:3b:
cf:e0:47:81:6e:cc:02:e5:31:ba:b6:ad:ff:3a:68:19:8f:9a:
89:38:6e:07:71:40:0d:13:ee:d3:95:c6:51:f5:f3:34:7e:86:
a7:3b:c5:27:4c:a5:d3:90:05:36:76:71:b1:77:ab:0e:db:8d:
fa:61:51:f8:18:e2:8e:3e:8e:16:eb:6c:f2:57:03:4d:a5:fd:
35:ee:c9:b5:d7:79:f8:55:39:f4:3c:81:1f:91:62:a2:8a:88:
ef:a7:dd:c6:01:4e:72:a2:84:ef:65:19:3c:f2:aa:73:b8:73:
fb:f2:c7:93:f1:d7:c1:17:1a:6f:58:c6:67:c5:31:7e:de:94:
cd:dc:33:ee:4a:0e:12:fb:9d:75:71:b9:37:35:da:63:d4:48:
e7:bb:86:85:a2:5a:a9:26:1e:d2:4a:df:91:9a:45:d6:b1:fb:
58:a4:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:57 2025 by rpki-client