Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: w7BydcnxpQ5UGvHwpkEaZN/LF897OT+rxKIpaoV0J6M=
Subject key identifier: 39:4E:86:B6:7B:C3:13:DB:1F:EE:28:16:A8:45:02:2C:A8:DF:57:89
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 0198D65EFC1887A43B0CC1026959C22FBFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 0917
Signing time: Sat 23 Aug 2025 10:00:05 +0000
Manifest this update: Sat 23 Aug 2025 10:00:05 +0000
Manifest next update: Sun 24 Aug 2025 10:00:05 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: iCFVE3ulGVQ5Iky82l9HtCrhe3dSXuw5rLsK4ZOuUPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fc:18:87:a4:3b:0c:c1:02:69:59:c2:2f:bf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Aug 23 10:00:05 2025 GMT
Not After : Aug 24 10:00:05 2025 GMT
Subject: CN=394e86b67bc313db1fee2816a845022ca8df5789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:a0:d7:f8:56:c4:07:d4:ae:3d:d7:b1:7b:
99:ac:77:4b:50:d7:5b:8c:f1:86:cb:b7:f0:24:d8:
47:48:d5:eb:96:bd:76:87:c8:0f:98:39:e7:d7:18:
df:fe:c4:09:22:1d:b9:e1:f7:17:52:6f:98:ab:f0:
1d:c2:d4:94:3a:00:c4:ae:75:db:4f:43:03:4c:04:
69:16:4e:80:c1:cc:a1:22:da:54:1d:b6:b2:e4:23:
7e:c7:e3:fa:68:98:d1:fe:79:c5:94:af:9d:f8:fb:
ec:b3:26:eb:05:c1:04:80:76:b9:84:3b:2e:b1:ab:
0f:e2:f7:cf:93:81:df:99:58:f9:86:06:e7:84:aa:
54:69:35:eb:56:e5:65:b6:17:03:43:24:1f:e9:d3:
f8:67:4b:58:83:81:49:75:be:4a:cc:62:7a:42:cc:
d8:82:8c:8f:d3:24:80:bd:13:f7:f4:09:5e:da:bb:
43:7f:7b:05:aa:0e:9d:e0:07:35:80:ef:4d:fd:6b:
f7:79:fa:91:0a:e9:64:29:db:9f:cd:c3:7c:31:e4:
b5:5a:a1:88:f3:9f:77:d0:b0:a3:59:0e:15:2d:00:
b3:2a:67:54:ef:68:63:cd:08:60:29:ea:24:da:3b:
e6:30:c8:ac:b3:12:01:78:8b:23:f8:e7:05:f1:62:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4E:86:B6:7B:C3:13:DB:1F:EE:28:16:A8:45:02:2C:A8:DF:57:89
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:3b:5f:2a:28:79:f4:8a:5c:ca:da:17:ab:1d:86:08:ef:
b7:ea:f9:34:6c:b9:34:1c:9e:dc:80:43:ee:b1:29:e4:d9:48:
d6:6b:4a:cd:cd:ff:b2:d2:c8:32:1d:0b:51:08:80:4c:0a:be:
84:bc:ce:26:b3:44:16:bb:cc:48:2d:9c:6d:d8:84:44:4e:0d:
8e:9f:9f:69:51:ac:ac:82:6d:04:37:c4:89:84:2c:25:90:7a:
9a:7c:87:c7:8a:96:45:80:c6:dd:8f:79:21:6b:82:bf:2c:a9:
bc:3c:85:67:64:2f:50:94:42:a4:09:69:f5:62:ed:10:42:05:
2e:c0:d5:1d:17:e3:16:14:f1:12:0a:27:98:bf:c8:5e:58:d8:
4c:cf:a6:69:a7:81:b8:4a:82:00:6b:09:8b:e6:3c:b5:bb:8f:
f2:02:44:dc:01:c6:63:19:6c:f4:37:c4:df:9c:66:96:a5:68:
b6:96:26:a6:20:c7:1e:7c:f5:22:f9:e4:4c:0b:08:d7:55:f5:
c9:04:e1:8f:ba:45:f5:0c:20:fc:8d:d6:83:03:98:e0:63:70:
62:a8:f3:90:a7:39:d1:15:a2:14:f4:8b:e9:a8:49:8d:a5:c4:
e2:26:91:aa:f9:58:73:84:b5:3f:70:ee:fe:7e:3e:63:fb:33:
03:2a:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:39 2025 by rpki-client