Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: jPsgwzyR/0hFF7zb8paqwZ0XuWUTgtwcnZSI3FOifgk=
Subject key identifier: 0D:D6:8A:7C:69:B4:73:8D:51:29:B1:C0:AF:18:75:A5:3E:DD:99:E6
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 0198D5BC1B7382D005402B3CC95CFA6BA9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: v5itehzI4NjP4E0LssztQIvdLYFvz36vcxilwiQaWUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1b:73:82:d0:05:40:2b:3c:c9:5c:fa:6b:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=0dd68a7c69b4738d5129b1c0af1875a53edd99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:21:78:ee:df:82:72:3c:04:be:cf:54:85:
6b:25:86:e2:d3:df:3d:70:7a:e8:f4:66:1d:f4:d8:
3a:92:47:b6:ec:32:6d:14:3f:63:ec:ed:48:93:12:
49:af:2f:08:3e:d7:8b:d7:6d:ff:44:05:54:0f:bd:
fa:f7:ef:be:11:e2:25:7a:96:4b:4a:6d:f5:72:ea:
26:73:c2:03:20:38:e1:9b:c4:67:1c:72:ce:62:e7:
72:08:1c:02:7b:d1:39:7e:98:bc:72:19:43:06:0b:
d4:a8:0a:75:fa:00:b5:62:f2:42:53:b1:98:7a:0a:
3d:d3:4e:74:21:a7:1b:93:2f:e4:09:bc:91:d4:44:
d2:64:51:cb:36:4a:2e:df:fe:07:2f:3e:01:2f:c5:
95:9c:9a:46:39:2f:d8:dd:ea:b9:64:49:d4:f5:30:
53:6a:17:05:1b:81:62:88:85:47:55:62:9b:f4:6a:
b4:e1:6a:39:c9:8f:81:09:6f:79:d4:d0:38:ad:7e:
98:b8:ec:04:d2:83:fb:28:00:33:d6:89:23:ba:b6:
f5:3e:24:c4:de:45:89:90:bc:26:82:f1:92:c8:fc:
d4:97:58:4e:85:1e:19:78:bf:a8:c9:fd:ba:33:62:
84:e3:0f:99:d9:d3:05:f7:65:db:53:ea:d3:3e:89:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D6:8A:7C:69:B4:73:8D:51:29:B1:C0:AF:18:75:A5:3E:DD:99:E6
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:98:b1:ef:4a:5c:71:55:74:7f:9e:5d:1d:75:8e:e5:e9:f6:
c2:03:86:2d:8a:05:f6:95:4a:83:4e:8a:87:d2:a0:5d:8c:4f:
89:97:2d:a3:d1:8d:35:57:24:40:c8:74:3a:76:44:a3:e4:00:
e6:4a:b4:15:42:c3:9d:ef:84:58:df:b2:c3:c0:70:39:4c:a9:
9f:3f:09:85:d1:b0:eb:dc:71:eb:3c:74:54:89:94:67:a3:23:
7c:20:34:f7:2a:7c:1d:92:76:10:1f:b3:70:bc:82:d8:4c:f6:
29:6d:6f:d1:26:80:f6:cb:48:74:d6:65:bd:5c:d4:49:88:9e:
d0:45:85:86:4a:cf:ee:92:a2:d4:68:ae:30:58:26:d2:82:37:
e2:ed:fa:1e:5b:01:24:bf:4e:c1:a7:c3:8b:7c:9b:75:42:59:
06:93:aa:14:bf:07:bc:4d:65:79:5b:3c:e3:3b:93:3b:21:3c:
27:1f:8f:6e:f2:be:27:1e:bc:c3:2d:ae:96:70:26:a0:35:7e:
be:5a:6a:e4:08:bf:ac:6e:79:69:9e:f8:0c:51:06:4b:77:5e:
69:92:d1:25:28:7e:62:20:56:30:f7:86:e1:7c:cc:d8:3a:6b:
3c:7f:38:9c:dc:9c:55:03:26:01:90:91:50:b2:37:7e:dd:a6:
86:77:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:15 2025 by rpki-client