Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: m8glvpwHBOza/i2LLWiJqdhXkw6TCqCK3Zxt5OHU9gk=
Subject key identifier: C6:AE:0B:41:46:78:94:D9:1C:05:1F:41:9B:4C:34:D8:11:C2:F0:22
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 0198D4E03F7147BC7E8B66376E25A486C052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: RPYUawablWE7kStDMfSjCMAr+G443LUvEUN2R+Qp2hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3f:71:47:bc:7e:8b:66:37:6e:25:a4:86:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=c6ae0b41467894d91c051f419b4c34d811c2f022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:f3:d6:ae:c3:0e:a5:7e:4e:eb:cf:8b:bc:
d8:20:87:6b:3e:63:cd:8b:64:fb:d0:b6:1e:9d:d7:
bb:f8:3e:bd:dd:9f:58:07:6d:b2:1d:ee:9d:91:8a:
62:3e:7c:ae:94:4f:37:71:17:d1:e8:1b:55:a7:5d:
f5:01:4c:d7:7c:ab:08:fc:4e:b2:dd:71:de:4e:25:
64:0c:2d:da:01:3f:0d:9b:d6:ca:77:2b:d0:ce:ac:
fe:43:9e:93:ab:e3:b1:6e:0c:a3:86:b3:99:a9:d0:
8b:45:91:1a:c6:98:66:5f:2d:ed:47:42:3e:68:2e:
38:cb:f2:2d:08:e5:e1:20:a8:7a:ef:a8:ee:34:34:
5d:b7:9c:ea:78:8f:fa:64:d6:e5:6f:d5:b8:e6:34:
ff:3c:a8:f3:80:78:2e:b8:09:f9:9f:cf:a6:fe:86:
8e:42:47:79:3f:27:df:af:78:5f:ee:ae:aa:d3:f9:
a1:fd:55:1d:2e:4f:5f:03:87:64:10:1b:09:5d:ee:
80:0d:a7:62:c5:b5:51:2a:64:be:bd:2f:41:75:7f:
1a:6e:3a:83:06:ee:33:10:b3:b2:6c:d2:de:78:f7:
bb:0e:22:aa:65:98:fd:59:bc:f1:66:33:06:3c:ff:
c2:76:28:70:ab:1c:6b:24:41:ef:be:3a:4a:98:0f:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:0B:41:46:78:94:D9:1C:05:1F:41:9B:4C:34:D8:11:C2:F0:22
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:54:2d:00:16:07:64:6a:32:c9:df:49:09:1d:d0:b5:46:
51:eb:03:08:e0:0b:9b:c6:75:84:3c:14:11:90:33:ea:dd:99:
2b:29:37:bf:18:ad:b6:a3:c0:65:a8:7c:05:b6:e8:db:5b:5e:
b4:cf:8c:ef:ad:c7:b0:b4:cc:6e:0c:92:74:6f:63:54:01:73:
7a:30:7e:85:a5:d2:d3:6e:1e:76:8d:9b:46:db:e6:48:5d:34:
5e:d2:23:f0:cb:d7:6f:f2:54:5c:27:ee:b6:63:4b:3d:ac:4a:
1a:d8:0e:fb:f3:ea:a2:65:41:a9:dc:f7:1c:57:be:13:fc:f7:
58:74:65:7b:aa:89:ca:1f:6b:27:94:1f:ac:4d:f8:10:2f:63:
0e:fd:7e:6f:27:6e:f2:a4:39:ad:2c:cd:1d:9e:da:4d:72:91:
5a:d4:56:a0:c5:50:25:31:96:90:e5:59:e7:46:83:c0:59:f7:
f0:46:88:01:91:0a:48:9e:b2:0a:da:81:f9:76:5b:6d:8b:7c:
78:e3:08:c3:cf:60:e7:72:76:8d:c1:de:fe:7f:87:b4:6a:49:
e9:67:98:08:79:08:cd:74:df:9d:ed:f2:fb:38:5a:c9:7e:84:
ec:42:8c:b0:ea:e4:b2:fc:51:81:c9:c2:dc:d4:1b:de:ca:66:
57:f2:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:33 2025 by rpki-client