Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: S27AwtvhuL7ZRdpbtJIzdI0gDCQhwnjzBlit5IBOC+M=
Subject key identifier: 52:CB:31:8B:85:E4:DD:57:C9:6F:82:8A:76:F0:C0:EF:DA:85:59:1B
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 0198D4E00A54E5BD104785A5725979557972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: 33E246FQjC3DmKe7HWBn1+fq9vjaP3eYujDAEfUOLRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0a:54:e5:bd:10:47:85:a5:72:59:79:55:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=52cb318b85e4dd57c96f828a76f0c0efda85591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:9e:29:fe:2b:24:d0:89:8a:35:99:91:42:
de:c5:c1:d5:1d:f0:78:95:3e:e9:a3:d7:cf:f9:d3:
2b:6b:34:7f:60:a1:6f:05:00:83:d3:d6:90:5d:93:
f4:8c:30:d1:18:0f:2f:b1:79:2f:e2:e4:7d:1b:34:
13:08:a1:84:aa:c2:b9:dd:cf:f8:38:46:6f:08:12:
d7:50:01:7d:f9:45:30:51:47:90:94:ee:ab:89:ad:
79:ee:42:c8:71:23:b8:d4:92:76:6f:a2:cd:09:52:
e0:a5:e9:3b:eb:fc:57:b1:75:3d:a4:61:19:95:c5:
d2:83:44:9d:14:be:12:18:aa:21:86:c1:4a:42:b8:
42:4c:3f:93:98:ea:17:12:14:c4:ae:36:7a:e9:27:
c8:17:de:5f:dd:a7:6b:02:33:b4:8f:18:92:0c:7d:
da:d5:a0:9f:49:46:a4:4a:ec:4b:f8:c2:5a:a3:49:
56:20:96:f8:d3:c7:58:6c:22:52:e5:b4:74:bf:c0:
68:04:f7:0a:93:d5:b8:06:e4:07:98:c6:82:3e:11:
8c:2e:4a:7a:a5:33:d2:78:9d:9a:02:2f:87:1f:6f:
33:89:fd:d5:ba:a4:89:85:d2:b8:d6:a9:e3:77:46:
fe:89:02:a0:d4:6d:6c:d3:a0:cd:4c:41:b1:d0:a2:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:31:8B:85:E4:DD:57:C9:6F:82:8A:76:F0:C0:EF:DA:85:59:1B
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:cb:53:aa:f2:c2:f8:4c:e0:80:5e:11:a6:1a:14:db:64:4c:
b6:96:b8:be:d6:bf:26:68:67:ed:db:36:c9:3b:27:f8:10:f2:
b3:79:82:c5:15:51:ec:e4:62:9f:ed:51:a7:18:fb:3b:77:27:
ac:1e:a4:9c:4a:32:42:00:ba:cd:0e:8c:0c:11:3c:65:d2:e3:
23:ea:45:b3:00:d8:08:ce:21:15:fd:99:e2:37:27:f7:fe:48:
d5:a3:82:bd:b0:57:6a:7b:e2:9a:a2:ac:62:cf:13:3e:87:ac:
55:c9:07:f6:7e:3b:e5:b2:81:04:b0:03:09:5a:8f:c7:ea:7c:
36:cb:ee:40:5b:a5:4c:68:e2:6e:ed:d1:9b:1c:75:77:c5:eb:
62:c1:6f:bd:ab:46:7a:f6:90:0c:23:0e:71:62:44:32:ef:9d:
5a:b0:ee:8b:82:9e:ad:4b:cb:98:86:65:81:4d:0d:7b:54:8c:
39:76:76:af:25:71:d1:17:1d:6d:04:4f:1b:cc:ce:5c:72:32:
b6:f1:31:28:fd:72:23:ad:8f:b6:d0:37:fa:5d:e3:84:85:1a:
a4:36:f3:68:c3:db:18:21:14:c9:4e:45:ac:60:d7:23:63:a3:
97:40:6d:82:b6:8d:0a:7f:26:f5:d5:ba:fb:ee:33:1d:f9:a7:
d7:d9:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:22 2025 by rpki-client