Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: RPCozFTK7faNoblNIjkI+YLiGeYdcAFyoyMI7C/Xcfo=
Subject key identifier: F7:CF:09:7E:61:87:07:D0:06:6F:2B:81:AD:76:EF:83:B4:0C:5A:C7
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 0197B9D8FC4715C72CC022551E042BDEF951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0DCE
Signing time: Sun 29 Jun 2025 04:01:34 +0000
Manifest this update: Sun 29 Jun 2025 04:01:34 +0000
Manifest next update: Mon 30 Jun 2025 04:01:34 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: eVepqtoiXQgWhRaeP0zmrggLSN+j2QsBSI9ZcbVda3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:fc:47:15:c7:2c:c0:22:55:1e:04:2b:de:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Jun 29 04:01:34 2025 GMT
Not After : Jun 30 04:01:34 2025 GMT
Subject: CN=f7cf097e618707d0066f2b81ad76ef83b40c5ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:3d:28:b8:0b:32:9a:3f:8a:b8:ed:0d:34:
9b:9a:d9:94:a8:fe:32:3b:c4:7e:49:83:55:ad:7d:
9f:33:95:5c:cb:53:08:65:70:69:a2:61:f5:61:13:
9f:9b:70:b1:6c:bc:0e:42:36:69:d3:18:57:04:2d:
b0:08:d5:43:7c:7b:4d:58:b9:7b:dd:7d:b1:12:e3:
31:7c:84:a3:8a:d2:18:be:a9:0a:8c:17:d8:85:e2:
e5:78:45:28:ec:ac:a3:31:63:b1:01:cb:e5:ae:25:
d6:d4:bf:7f:d5:d7:e2:e8:c3:e2:41:a6:b1:08:7a:
1b:15:d5:b3:1b:ef:47:58:c3:1d:f6:08:04:6f:25:
62:0f:e6:5b:9d:1d:4d:8f:18:e2:d7:f1:34:f9:a8:
55:ff:13:8a:58:5f:37:cc:d4:32:9f:f0:81:e2:d9:
11:45:6e:d5:2d:bb:9f:9e:78:8f:2a:0a:8c:96:34:
2f:3e:1b:c0:cc:eb:cb:f7:b2:50:43:ec:33:db:06:
c0:71:b2:2d:39:78:bd:5d:85:b5:53:9a:5f:2f:62:
59:71:90:08:de:50:96:d3:30:b7:09:d7:d3:59:14:
52:66:1e:f9:7c:0f:c6:4c:f9:00:b6:12:14:da:25:
bc:17:b7:1e:6b:6f:fe:c7:7d:30:df:18:ac:47:27:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:09:7E:61:87:07:D0:06:6F:2B:81:AD:76:EF:83:B4:0C:5A:C7
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:21:64:47:9e:a6:8f:c7:c6:36:6b:b6:a5:92:31:07:5f:27:
27:d0:8e:a8:43:60:63:55:9c:a7:2c:b0:54:dc:50:70:cb:c2:
cb:0c:68:ba:b3:22:8b:54:2c:7c:3d:27:d5:a2:ad:41:16:1d:
41:8f:00:91:93:b6:47:f9:48:a0:ef:1d:37:cf:fc:a7:25:76:
e2:0c:06:99:88:0b:51:c6:1a:c9:cf:bd:e9:86:f4:db:98:48:
50:11:ee:7a:a5:fc:94:ab:2c:f1:d7:94:ed:cd:d6:77:c5:b8:
e2:9c:40:65:1b:4c:c1:ce:b6:f3:d8:0d:92:e1:0d:4f:fc:07:
8a:e6:db:60:67:2b:9d:50:90:9b:83:05:17:d3:09:36:62:af:
64:59:a4:9a:1a:8e:cc:bf:dc:ed:ad:ff:44:17:66:85:4a:84:
14:82:69:7a:bd:1b:11:23:2f:34:79:6f:1e:47:e8:b9:4f:0e:
4f:65:4e:1c:87:bc:dd:68:1c:2a:76:ca:10:e0:5b:96:77:51:
13:6f:ad:67:2b:cc:f8:82:60:1e:a4:fa:64:22:65:7e:d6:47:
88:16:fc:81:81:99:04:b4:2a:2d:a5:dc:af:3c:0f:a9:bb:57:
8f:96:11:12:9a:7e:b7:45:85:2e:9b:a8:9a:11:19:39:29:e7:
57:8d:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:52 2025 by rpki-client