Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: iWeTpKzCzBJtYO/fefFpUkdsxd8lP1H58gYUXIUR32g=
Subject key identifier: 02:11:79:25:68:1F:15:55:47:DD:05:C0:35:94:3E:85:EB:E8:EA:B1
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 0197BA0FB6C1BFBD946D07C93921387B12B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 02DE
Signing time: Sun 29 Jun 2025 05:01:21 +0000
Manifest this update: Sun 29 Jun 2025 05:01:21 +0000
Manifest next update: Mon 30 Jun 2025 05:01:21 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: MkLYLSqCiWeNdf2rHT5P4ITqY8IXziScE7w9/UcQaTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b6:c1:bf:bd:94:6d:07:c9:39:21:38:7b:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Jun 29 05:01:21 2025 GMT
Not After : Jun 30 05:01:21 2025 GMT
Subject: CN=02117925681f155547dd05c035943e85ebe8eab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:30:56:bc:93:06:4e:3d:c1:ad:0a:7b:c4:
8c:0e:28:d6:c0:5c:45:10:c5:f1:c4:56:58:e9:5b:
e9:9c:18:0f:fe:66:58:68:af:17:8d:d3:b4:4c:f5:
93:0d:6c:ed:2a:e6:67:3a:26:d2:f7:42:05:eb:0f:
86:48:78:67:9b:40:c8:a2:80:0b:17:33:40:9e:44:
43:cc:b6:a5:e5:11:5d:eb:43:2e:13:e7:02:8b:28:
12:0b:54:af:53:cf:8c:56:1f:74:d1:18:b0:49:65:
09:40:8c:19:7d:ec:eb:61:64:f0:66:43:c8:e6:df:
71:19:15:7d:cc:e8:3a:fd:b7:e5:38:5c:a0:db:b3:
84:3d:c2:00:b7:e8:a9:f3:c6:a2:69:10:d4:ea:71:
33:12:f4:ec:6f:16:c0:cc:62:72:a1:f2:1b:40:4f:
47:15:7b:ba:3a:b4:b6:93:ae:f6:95:46:52:67:48:
f6:88:71:d0:5c:f0:23:24:68:6d:83:56:4d:2d:c7:
56:61:9a:24:8b:c7:3b:14:dc:08:7e:29:67:17:0e:
73:67:d0:19:3c:a0:ea:ef:fc:80:8b:bd:89:f0:da:
ee:ce:e8:1d:68:9c:e8:00:0f:f2:63:92:95:e8:85:
09:f2:da:32:47:b2:84:ae:c1:b3:88:b4:91:4b:ff:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:79:25:68:1F:15:55:47:DD:05:C0:35:94:3E:85:EB:E8:EA:B1
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:53:c1:fd:c8:4f:c6:17:c5:d8:dd:0d:c8:a0:73:e0:2f:68:
e8:8e:44:4a:ae:06:59:86:db:84:e4:85:59:23:d3:37:84:59:
68:a8:de:f7:86:45:3c:eb:00:49:6f:b3:9f:65:33:fe:5f:04:
0f:19:49:4d:97:dc:46:ca:a8:9f:4e:c6:48:0b:cd:99:89:10:
e6:a4:70:b6:ed:1f:15:79:3d:ab:f9:94:12:aa:da:66:a3:2f:
01:c7:35:fb:62:ac:54:89:f3:83:c1:ea:41:ac:19:18:93:d1:
7d:c4:3e:99:ce:69:92:56:f0:76:df:d7:0a:0e:f3:7b:8f:f5:
b1:43:d9:4f:fa:30:28:a0:0b:56:ef:54:d3:86:20:85:33:64:
f5:35:1d:94:5d:9a:9e:6d:46:3e:29:42:d9:69:6c:82:a9:38:
3d:92:a6:ec:50:28:c1:67:c7:99:15:2a:3c:fc:d0:dd:57:f8:
ab:0b:e8:b1:7f:1a:ff:9c:72:73:6c:09:1e:df:e6:e1:7f:51:
d0:56:0b:32:08:47:22:e5:43:e7:d2:58:27:93:d2:46:59:a8:
d5:12:ac:5f:a8:a4:40:35:25:f8:cf:ff:88:bc:ad:72:aa:c0:
01:48:d8:92:84:b5:e8:b0:ae:6b:18:c3:e1:7f:4e:81:4b:92:
45:d1:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:54 2025 by rpki-client