Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: t6lmVrY7LIXy/pdvaBlxeck5vne4eGMCUfAUeEdqwyc=
Subject key identifier: 25:11:E7:52:60:53:44:DC:39:09:8E:C4:77:1C:1D:D2:D5:75:42:C4
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 0198D4E07B71E0DDAA07BB25A5D890D10982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 0673
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: a8AsrRWXVC2zDCE5mnQgNawjYJTeO+zPM1tirX4nA5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7b:71:e0:dd:aa:07:bb:25:a5:d8:90:d1:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=2511e752605344dc39098ec4771c1dd2d57542c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:91:28:35:23:cf:bf:9d:19:0d:09:65:73:
b5:96:d3:fe:c7:d9:37:fb:c4:cf:43:3d:ba:cc:ea:
05:76:40:f6:ae:b8:d9:5f:31:7a:4f:28:6d:ba:a4:
c5:ef:f4:34:77:68:4c:5e:1d:8c:5b:36:87:d8:40:
d6:d2:ff:c3:1f:64:f2:b5:c2:96:aa:89:4f:3d:a2:
44:3a:63:6b:bd:00:c9:ae:5e:f5:c5:13:35:71:31:
f3:e5:cd:a2:29:00:9d:b9:c7:98:58:02:35:00:bd:
fa:f4:35:8b:db:d2:a4:21:5f:e3:d2:79:46:a2:f9:
99:c3:18:1a:27:65:a7:f2:d8:4a:59:a3:05:76:ba:
89:ea:e2:c7:9d:70:8a:e9:17:a3:54:24:06:1e:1a:
c8:c7:4a:ad:95:4b:51:70:db:a0:aa:d2:f2:30:79:
57:cd:7d:5c:1f:07:bb:0a:da:60:7f:fb:b6:96:4e:
41:1b:93:b1:f9:c1:18:8f:0a:54:cb:1d:4f:5f:51:
a9:10:35:92:8d:ad:0c:02:b7:67:96:88:c1:59:63:
f3:cf:35:f1:c4:56:67:b4:ae:67:94:05:5c:a4:c9:
84:ba:2d:12:6c:99:95:27:b4:da:f7:ed:0c:6d:cf:
a9:f1:60:97:01:13:8e:a9:1f:af:9d:82:03:1c:29:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:11:E7:52:60:53:44:DC:39:09:8E:C4:77:1C:1D:D2:D5:75:42:C4
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:76:24:10:c4:9d:2a:01:6d:2a:7d:49:6b:8e:6c:f1:98:
5f:73:0b:f9:66:2b:1c:09:ec:4c:06:b1:a4:ed:fc:f0:7a:9c:
4e:a9:68:7d:ba:34:c0:9a:4e:e0:33:d6:ef:41:1b:40:eb:bc:
e5:fb:86:96:c1:0f:bc:ff:a5:64:3e:38:6f:79:fa:62:68:3a:
79:42:10:8e:bd:a9:b0:35:c4:65:60:f7:e3:ce:80:e6:fb:32:
85:2f:4c:f5:7c:db:15:c6:70:39:3b:68:01:57:6c:e0:89:ae:
db:c0:80:d9:8e:32:d0:6f:d0:2c:52:0f:ba:92:c6:f1:95:2c:
54:db:02:b7:90:90:31:06:4a:85:e3:7f:9d:02:3a:29:e6:e0:
ec:33:7c:f1:41:bd:8d:c4:87:6a:87:da:e6:6c:94:1a:42:8d:
5e:0f:13:f8:a8:e5:8b:77:9c:cd:73:03:e6:74:dc:ff:e5:12:
bb:7e:05:7b:02:da:a5:cc:93:72:45:3f:22:f4:68:92:0b:42:
6f:c0:b6:5d:ec:47:c4:6e:b3:cf:ea:f9:96:e2:d6:ea:a5:c8:
07:5f:b5:ad:95:ea:15:60:72:22:c3:75:dc:30:16:7a:b0:71:
b5:72:03:ca:0f:a3:ea:39:c0:e1:97:81:ff:4b:0f:5e:3d:b8:
fa:eb:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:33 2025 by rpki-client