Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: RidmBZ+Jt5cnOiZw/ozXzyMuc7W/Dq/44WwV6w3bzaI=
Subject key identifier: 39:B5:C8:33:C3:58:2F:F1:E4:A8:C8:78:B6:F7:2A:83:DB:23:6A:E0
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0197B5FBF94F20A622E2039BAABFD21A60A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 08ED
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: 30gkniHXhxBjmqUacZ1g4O8L/UGjrWQ6dU4jAh5EcAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f9:4f:20:a6:22:e2:03:9b:aa:bf:d2:1a:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=39b5c833c3582ff1e4a8c878b6f72a83db236ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:ae:63:81:8c:dd:5a:81:ff:e6:0d:ba:16:
8d:46:29:dc:72:5e:89:ab:69:b1:60:b6:20:ad:d0:
84:31:ae:aa:ca:29:4a:5c:a6:2c:09:a7:8c:27:3d:
03:31:53:ad:15:f4:96:12:71:2f:67:02:bc:91:8f:
4f:1c:7c:b1:bf:89:7e:73:24:06:e3:78:ea:0b:f2:
c4:fb:30:64:b4:3f:7a:03:9b:08:ca:ae:16:2b:64:
4f:91:bb:47:5e:09:ae:d3:6a:2a:7b:43:e9:7f:c2:
82:c9:30:86:74:cc:db:44:1b:bb:ec:cd:9e:42:8a:
73:fd:13:a3:02:d8:cd:e6:80:4b:d9:bc:26:bc:f3:
1a:f3:3e:f8:69:3f:ec:2c:b3:37:cf:db:a1:46:81:
cb:d4:2f:a7:9d:a4:48:69:b7:7e:d3:18:05:c7:f9:
81:72:6d:f7:80:09:46:5c:3b:cd:a3:dc:fc:9c:ff:
85:03:3b:59:99:3b:9c:62:23:a4:ab:58:04:df:f2:
ff:69:fa:d2:89:1a:40:55:e5:9c:74:83:3b:15:2f:
45:b5:a1:82:ce:d4:4d:7e:6f:59:88:be:c5:76:84:
ae:1c:f4:2c:a3:e9:72:76:17:0c:ab:fc:1d:96:58:
57:d0:c6:00:6d:40:1f:17:ce:1e:96:b8:7c:80:51:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:C8:33:C3:58:2F:F1:E4:A8:C8:78:B6:F7:2A:83:DB:23:6A:E0
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:4e:8c:0e:a0:71:81:e9:6f:ca:03:55:dd:b4:77:a0:d3:
b1:12:78:26:b5:b8:17:fa:8a:0a:04:67:80:01:fb:0f:8e:65:
ab:ac:fb:51:bf:d1:c1:a1:81:69:f3:91:b4:64:db:07:5c:57:
02:1d:08:52:46:78:ac:2f:08:e0:46:fd:82:29:09:14:ee:e7:
13:33:d9:57:9b:33:27:d0:b5:4d:ae:2e:3a:be:fc:df:0b:4e:
7c:b5:97:1d:8b:97:73:af:1c:3f:e6:0c:52:f7:33:6e:78:50:
6e:4d:08:6c:67:65:58:22:42:ef:7a:7d:5a:e1:07:08:5b:51:
85:e6:1e:b2:04:12:38:1e:17:5e:59:e4:47:09:5f:00:72:e7:
08:0f:2a:b2:63:c5:b5:e4:18:d5:31:80:2c:db:fe:c6:3f:11:
3d:3a:00:d2:f5:45:90:b9:64:89:76:0f:d1:12:b9:cd:61:39:
05:14:70:0c:b8:b6:62:24:8e:85:05:9e:b2:f3:9a:32:7e:fa:
cc:4b:a1:de:a7:9d:ef:1a:61:29:c1:28:a3:d4:0b:1c:34:2c:
31:44:4a:a0:23:5e:63:9d:70:1e:af:b9:ea:13:4c:d3:5d:5d:
23:c4:07:3d:ea:fa:9b:19:af:40:1a:e5:c7:d5:61:5f:dd:a2:
a4:1a:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:37 2025 by rpki-client