Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: vSB+WqxbUuRfgi47pYVF7uNZR/m+X/RHBjVXyzg6OgM=
Subject key identifier: 64:CA:67:EC:98:2A:F1:A0:F0:97:1A:50:D3:6B:CE:5B:E9:71:54:64
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 0197C4C9E698099C704E13D0AEDB8CAC767E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 0481
Signing time: Tue 01 Jul 2025 07:00:55 +0000
Manifest this update: Tue 01 Jul 2025 07:00:55 +0000
Manifest next update: Wed 02 Jul 2025 07:00:55 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: +NsBUsu7bw5fACkoOtOpTAdwA7mla/ynzZItkcNXIGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:e6:98:09:9c:70:4e:13:d0:ae:db:8c:ac:76:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Jul 1 07:00:55 2025 GMT
Not After : Jul 2 07:00:55 2025 GMT
Subject: CN=64ca67ec982af1a0f0971a50d36bce5be9715464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:4c:6a:70:c4:e0:fd:2f:61:3f:b9:67:a0:
29:9e:6b:e7:b2:4b:77:67:4e:a4:91:79:02:38:6c:
3b:50:74:db:05:19:85:54:0e:f0:cf:a7:87:26:a7:
f4:42:2c:3b:ca:48:8f:00:f2:05:a2:7f:c9:11:cc:
c4:85:57:46:83:b7:37:2b:5a:40:c4:57:3a:11:d7:
8c:07:96:99:a6:63:44:0f:c0:61:60:ec:05:31:6d:
d1:db:b2:ef:00:65:0a:dd:f2:77:ce:3f:dd:f3:17:
de:03:a3:9d:02:14:ed:12:a2:a2:63:1b:f3:f2:55:
d8:45:50:6c:de:46:08:e2:6b:d8:9a:7f:7a:a0:4d:
8c:b0:dd:e8:25:da:54:aa:e9:80:64:8b:bb:ec:d2:
20:8e:22:07:97:68:e5:50:2b:33:6f:36:71:1b:ca:
d8:48:b3:cc:ec:05:4a:4c:cf:dc:7a:de:c6:b6:0a:
44:83:4d:e0:a6:8c:a8:ed:74:78:84:62:cf:3a:ca:
19:b5:cc:6a:2b:3b:ed:94:93:f0:fb:00:dc:6e:7c:
49:c7:3f:34:63:87:55:28:38:e2:60:a9:42:cd:d1:
f0:bc:65:21:0e:29:ee:6a:db:b6:5f:2a:8b:70:75:
17:6b:e7:eb:cc:99:ac:91:2b:52:07:67:4a:b1:f3:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:67:EC:98:2A:F1:A0:F0:97:1A:50:D3:6B:CE:5B:E9:71:54:64
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:28:83:2b:22:9c:44:89:67:ff:16:9c:d9:a3:8c:33:8b:
b8:4d:0f:c7:df:76:d3:f0:6e:06:b7:fb:f4:b6:f4:18:cf:dd:
22:c3:95:30:3f:0c:a2:3f:60:a0:99:7a:a8:95:02:91:d8:88:
ab:c2:22:6c:e0:0f:74:47:86:a4:01:41:0e:11:07:a0:23:96:
aa:86:e6:48:a1:50:59:75:a7:4f:8a:7f:77:4a:f8:cb:7c:36:
a9:7f:1b:0b:49:b4:27:31:e7:24:8e:3a:c1:f7:90:7b:85:82:
7b:20:54:d4:a4:d9:0d:aa:69:d9:3d:3d:b8:34:4c:c4:74:7d:
6a:af:2c:75:96:3b:d9:de:30:c2:a9:17:4f:20:0b:f3:f3:4a:
30:71:2d:21:a0:2c:79:88:eb:e4:8a:02:cd:fe:75:ab:18:c6:
da:5b:80:f9:0c:83:c4:23:84:70:79:dd:ea:63:cb:b6:99:49:
62:67:fb:47:a8:01:b2:dd:d4:b7:1a:6d:2e:ff:df:e6:df:b0:
e1:54:6b:8a:a2:0e:7d:1c:81:3b:e6:3d:f1:b6:fd:bd:75:0a:
6c:1d:32:46:00:a7:27:c5:96:27:2e:ef:8b:a6:3b:b3:38:83:
08:48:3d:93:a0:54:c2:25:c3:8b:1c:13:0b:b7:93:53:55:17:
4b:b3:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:57:06 2025 by rpki-client