Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: 8yzCIMJeeyOZlr8tkdY0brySo5OOJBugsby3WbCHJI8=
Subject key identifier: 17:8D:BC:0B:81:AA:7A:2B:5C:52:BA:26:22:04:8B:B4:D4:59:38:3C
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 0197B70EC598F9DE2782B315D8C4AA04AA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0911
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: 5ftCfKjdIBJX70/YwloG4BmpJUqzRU9n/lhK+0ZGvSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c5:98:f9:de:27:82:b3:15:d8:c4:aa:04:aa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=178dbc0b81aa7a2b5c52ba2622048bb4d459383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:69:51:a1:54:96:19:53:55:af:db:8d:9d:
62:31:f0:91:eb:30:72:c7:79:0c:af:a3:55:2a:f2:
12:69:10:b0:73:d1:a2:27:f4:1a:8e:50:57:a8:a0:
2c:b1:40:4b:68:76:9b:19:8b:e6:a4:df:0d:96:cf:
b9:0c:9c:b4:4b:ed:bf:78:13:57:fb:73:b1:ce:3d:
dc:f4:3b:ba:38:d3:00:7e:ac:d4:a6:2f:2e:3a:4d:
89:35:30:b1:ea:70:f3:08:50:a3:b5:75:cd:13:e7:
b7:64:55:e1:93:7e:c6:f9:9f:51:bc:de:28:db:b6:
6c:86:ac:cc:47:20:d0:65:72:fd:8a:69:70:47:cc:
ef:41:39:49:72:05:e6:e2:0a:46:03:6d:19:0b:9f:
aa:59:6f:aa:dd:6c:39:4e:ca:a6:0d:0d:2a:07:13:
95:c7:93:a4:8d:ea:a9:d3:86:b2:33:01:39:83:d8:
d6:2e:a7:ff:b3:59:d9:bf:9d:dd:d3:a1:f1:1e:57:
78:73:16:70:fe:c2:b7:be:b6:27:af:80:0e:a1:0d:
5e:63:2c:65:06:07:58:2e:9d:93:e7:12:bf:5d:b4:
68:3c:98:19:2c:d9:83:b4:fa:c4:de:45:26:22:b6:
39:ec:ea:5c:4d:8c:e9:24:d1:de:6d:71:b9:f5:7b:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:BC:0B:81:AA:7A:2B:5C:52:BA:26:22:04:8B:B4:D4:59:38:3C
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:98:3e:3c:f5:ef:52:36:b1:66:7e:24:c1:ca:00:c6:bb:6e:
6c:63:ec:51:2a:4e:4a:74:47:f5:ac:f3:75:69:e6:e3:9b:bc:
9f:27:f9:ec:7a:06:5c:c2:89:ad:4f:81:24:20:9d:51:1e:22:
a2:46:ff:d1:86:51:7b:bd:2b:20:70:ba:9f:d0:03:8f:4f:ca:
1c:4d:93:e9:0d:ca:ac:85:0f:af:ac:f2:b6:36:ef:29:80:c2:
66:0a:4b:fd:33:44:6b:95:9f:78:ed:82:cd:43:99:59:d3:a5:
15:2a:88:74:78:54:ef:fe:d1:c4:86:e0:9c:4d:e1:4d:31:be:
76:4e:10:11:13:f1:8f:1c:a0:20:2b:c4:a3:51:ff:7c:ab:33:
03:65:6c:d9:7e:46:ca:09:d1:38:6b:0f:b4:3d:3d:5b:cf:c5:
67:fb:52:13:0d:42:4e:13:55:3e:e3:94:3a:28:01:dd:1e:8f:
0e:e4:b6:29:41:d7:de:f6:f1:be:76:2c:ab:c7:a8:03:30:06:
af:6b:1a:6a:2b:e2:1e:8e:29:93:5d:3d:cf:0c:db:5c:21:3d:
99:32:41:c8:3e:08:c7:00:e1:ff:62:a0:87:cc:35:24:7a:21:
29:eb:22:0d:9c:52:68:da:92:61:9e:0f:6a:6c:e3:1e:26:8a:
9a:35:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:55 2025 by rpki-client