Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: XSQ1fNJRGDGn1ky1yjVB+40t6A8ByVbyu3miX76BBkU=
Subject key identifier: 0D:D1:8A:62:7E:F9:EC:3E:7F:42:68:D4:76:8E:47:28:EA:32:1C:4A
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 0198D65FAA2CBA81CAC8C33C1D665690B5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0B91
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: mBxHChR+9FqnEDT8TgNJ5Y4pupRLjQwTQoepCNxEFAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:aa:2c:ba:81:ca:c8:c3:3c:1d:66:56:90:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=0dd18a627ef9ec3e7f4268d4768e4728ea321c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:c8:12:03:3f:36:2e:a5:2d:a3:39:4b:ae:
02:13:ff:d4:1d:b7:11:fc:6e:8f:f1:6b:60:39:84:
d1:e1:6f:9c:19:61:36:45:fb:31:a2:81:9e:5a:ae:
47:34:c0:f4:75:02:bc:dc:5c:99:63:60:53:70:e9:
d8:62:7c:c6:d8:f2:2f:45:91:61:84:06:26:85:96:
e3:65:32:c4:b3:d4:68:87:de:e0:18:2b:09:08:09:
6a:9b:32:db:5a:c5:67:ee:c6:75:68:77:04:3b:d6:
61:eb:21:6a:76:7c:5f:a3:44:18:2e:83:96:23:5b:
06:f7:d2:2d:70:ec:80:0a:87:2a:18:95:e5:02:72:
87:b1:2d:c7:f2:6f:24:40:7b:a1:bf:52:3f:8a:4b:
93:af:2e:63:1c:55:0f:56:55:9a:c5:13:85:b1:b9:
1c:52:ba:ec:a7:68:40:09:c4:1b:50:e0:e4:3a:05:
80:ad:ae:39:37:0b:b4:e2:f6:46:e4:4d:92:d5:99:
28:1c:d4:96:f3:2d:da:c1:8f:17:61:8d:15:e1:df:
4e:72:02:c7:10:b6:7b:f2:52:35:b9:4a:62:b8:a0:
d8:14:f9:6b:ec:74:27:63:3c:f9:f9:90:f3:7e:5c:
a1:39:fe:6f:65:d5:64:44:da:33:5d:9a:46:cb:3e:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:8A:62:7E:F9:EC:3E:7F:42:68:D4:76:8E:47:28:EA:32:1C:4A
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:1e:86:cc:2f:52:0d:16:35:e9:94:31:e7:d1:68:f4:36:
4c:57:43:99:9f:b0:82:3e:ea:f2:84:92:20:2b:3d:61:4c:f2:
aa:6f:ce:5f:8f:1b:9a:d2:14:69:96:05:79:8f:62:8d:24:dc:
05:4e:a0:bf:a3:14:95:cb:f0:71:71:97:67:4d:00:c3:bd:3e:
95:2f:b9:c9:7f:76:8d:a6:61:6c:66:0c:d2:f9:68:63:89:e6:
b9:59:8a:97:26:e1:04:34:25:94:3a:6b:5b:a1:20:56:00:61:
ef:3d:fa:1f:08:ec:44:12:d0:76:82:cf:55:1e:fd:8b:24:d8:
0a:5d:a5:36:cd:63:18:13:91:65:63:17:2e:ec:92:1d:0f:dc:
e7:95:d3:44:f7:aa:e6:ef:6d:38:8e:fe:49:3f:56:43:4d:78:
c0:de:4c:49:35:6a:99:14:f4:94:98:ee:e2:f7:13:86:9b:53:
aa:c1:b9:0c:11:04:7b:ac:4d:b2:45:27:86:f0:b6:a8:0f:9d:
f0:d3:4b:2a:38:9b:c8:94:2d:2d:4a:c2:61:1b:f5:36:57:e5:
96:4f:fe:cb:ac:74:07:07:57:22:24:e5:e8:27:c0:85:bb:b9:
c4:6d:10:2e:92:81:d0:ad:36:12:07:7f:6a:c6:f7:31:44:53:
14:3e:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:13 2025 by rpki-client