Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: +Eg/tUwezmlLrfmPE0mXHHCex1SXSRjNrF1gWWqblno=
Subject key identifier: 68:B1:90:D9:8A:75:09:46:2A:76:59:77:FA:33:A9:05:2D:A6:9D:C7
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 019A729409761C88C89D984D3B56D7FED785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 1223
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: lR54AN4zzOrncZhdBrr05Km7v5aTABZnSk/FaOn/1m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:09:76:1c:88:c8:9d:98:4d:3b:56:d7:fe:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=68b190d98a7509462a765977fa33a9052da69dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d4:6c:93:fb:2d:34:38:83:84:00:f7:93:8c:
e5:94:ab:2a:b4:72:d4:e2:64:09:82:e6:40:6f:dd:
53:7b:af:36:4d:64:01:3a:43:5e:51:9a:b8:4b:16:
3f:3e:11:53:e0:0e:29:6d:51:f3:3e:e5:47:5b:ae:
3a:b1:4d:76:4e:a5:a8:f3:97:4f:fe:b3:81:c9:99:
13:1e:70:b7:14:b0:c5:f7:1a:4d:2a:42:e9:2d:f6:
16:3e:1d:43:8a:36:9f:b6:77:22:31:8a:b3:86:6c:
f4:de:a5:b2:f4:22:1c:d1:86:59:ae:b5:d4:1e:db:
c2:66:50:c6:78:16:c1:b9:47:e4:89:dd:50:cc:ea:
54:cc:ea:cb:dd:7d:c0:d2:6d:b5:71:37:45:c6:0a:
d5:d7:20:09:0c:a2:7c:61:34:5d:6b:16:0e:fc:2b:
3c:99:5b:15:02:93:ce:84:b3:d7:0d:70:24:2c:77:
e4:79:79:a0:95:c4:e8:66:a1:90:8d:fc:fe:43:19:
ac:40:0a:1c:75:2f:96:27:96:4e:5d:8a:45:1e:b5:
80:1b:46:1a:be:d4:f2:26:53:55:59:2a:0a:71:7d:
d2:30:29:9d:76:aa:36:23:0f:79:7b:2a:41:0a:1f:
66:9d:77:f8:40:e1:8b:fc:20:80:08:8e:64:58:85:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:90:D9:8A:75:09:46:2A:76:59:77:FA:33:A9:05:2D:A6:9D:C7
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:78:1b:9c:9f:0c:d2:81:33:8f:f1:75:b3:cf:d9:df:71:04:
e2:e5:b8:2c:3a:01:d6:a1:cf:f5:24:9d:87:e0:ab:61:63:68:
bb:e5:3a:ad:2b:38:a8:24:dd:ab:76:5c:e5:c9:e8:96:8c:b2:
17:09:7f:d6:98:26:8d:68:de:39:f0:d6:01:13:61:e7:ef:f8:
af:ad:80:1f:32:ac:61:a4:0f:bd:45:fc:bc:27:e3:d3:af:cb:
1b:f6:a8:32:7c:4e:7d:e8:62:4c:45:df:cf:5e:e1:27:b7:bb:
62:76:c0:6f:90:bb:05:d6:45:2c:cc:05:3a:bf:dd:97:52:80:
32:e7:1b:15:c8:93:89:be:86:da:f4:0f:e1:d2:1f:1b:3c:04:
29:ed:04:f9:a9:41:0f:38:49:e6:1d:71:f8:7d:bd:01:54:0d:
4b:4b:7c:d1:6b:0a:fd:fe:46:8e:e0:35:7e:0b:76:01:06:7b:
59:e7:f4:e4:7c:d9:05:91:f0:86:63:30:35:9e:20:34:05:47:
f3:ed:2c:8d:3d:2a:22:c9:2c:f9:e5:a8:40:d0:08:69:d5:f4:
51:07:e7:11:9f:68:c6:b6:b9:47:9f:10:b9:a7:3a:2f:b9:1f:
57:a4:92:d4:b3:7c:c3:32:a1:a5:03:73:38:e8:8e:fe:69:88:
c4:42:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:39 2025 by rpki-client