Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: tllPtmvQt63uCgzQCflVFvNzirFJdiPp+GxDu+0z0h8=
Subject key identifier: 7C:3B:59:DC:FC:20:09:B8:D2:2A:85:F3:C1:1A:82:55:C7:83:98:1F
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 0197B74534C7730B7E0802C0023A4296F9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0606
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: UXRNNeWXrf0/SGAR9dicVBBhqM1eQjEYcAShhvMWpHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:c7:73:0b:7e:08:02:c0:02:3a:42:96:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=7c3b59dcfc2009b8d22a85f3c11a8255c783981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:a6:04:fc:c7:35:a2:30:19:59:ff:1f:2c:
ba:ea:10:bb:71:34:29:80:5f:af:2e:f1:c9:1e:d1:
56:ad:5d:2e:c6:24:a6:02:5c:ac:e1:50:a0:54:a6:
a2:3e:d8:d9:16:0a:d2:d9:30:5c:8b:16:0e:8f:52:
44:d7:49:b7:6b:9f:fd:76:01:80:9e:dc:7c:a7:77:
59:77:e4:c5:5a:54:78:70:e9:8a:9a:86:6e:77:c5:
43:65:97:0f:18:3f:3f:1e:28:b2:77:fc:cc:5f:17:
76:00:ab:ac:2e:e9:8d:64:be:9e:44:ea:3c:3f:03:
e4:cb:44:a8:43:0f:b4:53:b7:fa:9e:ea:d5:ff:c4:
11:98:53:a2:5b:c8:43:50:98:8d:6a:d6:df:c1:4a:
4d:d1:ff:10:a5:ed:39:ac:e2:22:32:c9:a3:1a:e0:
8f:b2:97:48:86:84:1e:de:38:8b:5a:e8:cb:ac:1e:
89:b3:37:4d:f5:81:b4:59:db:90:43:df:75:f0:55:
d4:9d:c6:da:e2:2d:73:be:4a:46:7a:be:98:c1:27:
52:6f:e6:8c:e7:7c:73:00:1f:69:fd:86:d8:42:83:
6e:a4:05:2b:73:83:8a:ce:fe:ad:3f:1c:60:79:54:
d9:4f:e7:0c:4d:64:b9:30:fb:cd:a0:a2:75:49:62:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:59:DC:FC:20:09:B8:D2:2A:85:F3:C1:1A:82:55:C7:83:98:1F
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:ef:4f:a7:de:7f:ef:4d:e6:d7:8a:9f:9f:7f:31:be:d6:
9e:b6:6d:6d:c4:ee:38:7c:af:4f:63:a4:cb:23:a0:4b:ae:95:
96:f9:fc:c5:53:65:05:05:05:e3:4f:97:0b:a7:89:db:27:ce:
03:6b:11:ef:ca:5e:13:23:6b:da:b7:e8:bb:be:3a:64:ab:51:
97:f4:53:70:e4:59:68:ef:de:c4:ae:61:fe:26:5a:a6:df:ed:
ca:ea:d2:6e:6d:cc:69:26:0a:66:66:a7:3c:39:dc:eb:4c:9b:
f3:cb:83:fb:8c:19:72:78:aa:61:71:1d:81:b4:65:c3:a4:20:
e7:8f:65:61:30:f5:ac:ab:5e:b3:56:41:b9:3a:c7:7b:ad:c9:
e3:81:61:3d:8a:7c:aa:92:b8:a1:92:86:ac:fa:e5:7f:d2:8a:
89:fb:c0:c3:5c:47:2b:57:d5:c7:a3:6b:bc:8e:d6:d7:1c:b4:
9f:77:8f:d4:f4:2b:47:a1:e8:20:93:42:c1:b2:44:fc:ae:21:
78:4e:3b:4d:a9:a8:da:2c:cb:0a:96:1c:48:d0:15:49:59:85:
15:8e:d5:b4:af:53:a2:d1:41:41:53:a7:90:48:d6:a7:cc:83:
af:1a:b7:cf:59:11:1a:8b:f6:18:8f:81:fb:79:f2:3a:ba:71:
92:d4:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:55 2025 by rpki-client