Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: 2KH7JPmzyr022JNrhqSCuJ811YOuhya++9ZaBVMXM7w=
Subject key identifier: 06:50:EC:CC:77:A3:16:51:B2:8E:E2:DA:8E:94:9C:31:52:97:8C:03
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 0197B88FA24090B6DD9BD4222A9CDE4113E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0AFD
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: CsLuDJ9TwALWjgHycoJYyPcwXLQvl+nma938N0sisu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a2:40:90:b6:dd:9b:d4:22:2a:9c:de:41:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=0650eccc77a31651b28ee2da8e949c3152978c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:47:e7:7d:19:4b:0c:52:d8:30:0f:56:ae:
0a:c6:77:7d:1f:4d:1a:18:37:ca:9d:6e:e2:55:95:
aa:df:bb:6f:7d:54:81:f3:d0:e1:5a:0b:7a:3d:a7:
44:e3:ff:e2:b7:ba:cd:0b:50:fc:b8:0d:04:8a:1b:
25:f3:1a:41:fd:ca:4b:60:1d:fa:9f:90:cb:49:eb:
bb:8a:a4:ca:06:c8:9e:c5:fa:42:d6:6b:62:79:ec:
71:9f:5c:66:f0:ec:e6:6e:df:64:36:14:c0:12:0d:
13:0b:74:b6:8b:a4:85:18:5d:0d:e2:f8:b8:75:de:
e1:6d:02:82:03:3e:80:95:bd:ab:5d:4f:87:a0:43:
d9:a6:87:1b:13:f1:47:8d:4b:3a:41:e8:66:d8:9b:
13:2d:9d:75:f5:ef:32:32:56:b1:b3:61:2d:fe:c2:
cd:85:f2:74:e8:26:88:83:7a:69:02:ea:12:46:56:
43:ab:fe:c0:10:33:81:81:d5:f5:b1:9d:98:25:24:
73:27:50:31:77:0e:f6:c3:7e:06:d4:68:d7:b8:78:
c8:e4:dd:eb:fc:b1:e7:c8:aa:56:32:62:b1:90:d3:
29:ee:a3:ec:33:60:54:e4:f1:56:cb:ed:cd:bc:0f:
1f:b3:68:91:08:d8:e5:50:fd:18:e5:45:db:aa:de:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:EC:CC:77:A3:16:51:B2:8E:E2:DA:8E:94:9C:31:52:97:8C:03
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:4f:c8:f0:b5:76:12:cc:4a:36:52:db:a4:59:8e:14:6a:
64:fb:4f:ea:69:8a:40:e2:3f:20:fe:f0:a7:0f:fe:ab:41:2a:
5d:51:63:47:a7:57:0b:78:e2:8a:e5:ca:29:13:55:49:5e:82:
e8:f6:42:74:8d:f2:e5:ce:72:49:92:27:d1:8a:50:8f:c5:42:
28:0d:8b:0e:3f:e5:42:6c:2f:a7:3c:d6:07:e0:be:a5:2d:88:
71:ab:af:5f:fe:6c:03:5f:b7:8d:37:4f:3a:99:ce:f1:a5:8e:
14:b5:31:d5:0e:c4:40:a5:93:57:cb:bb:78:9c:34:40:57:70:
dd:23:34:c9:9c:d1:af:83:3a:44:a6:45:19:ef:f3:65:4e:6d:
59:22:42:5c:4d:f7:be:b0:06:4b:10:19:44:71:94:60:07:4d:
33:3a:eb:e3:b5:a9:aa:90:e4:cb:11:3e:9b:00:52:36:65:27:
68:38:f1:72:0a:32:e9:db:7d:c7:98:f3:44:e3:d2:2c:07:cc:
51:aa:32:8c:10:d4:9c:50:5b:b4:a0:67:d3:41:56:01:ec:d3:
c6:fa:43:86:0e:91:c2:a9:aa:8f:cc:00:61:46:1b:07:87:15:
36:9a:97:7a:2b:21:10:be:1f:12:61:fc:1c:f3:b7:f5:4f:c8:
45:7f:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:10:15 2025 by rpki-client