
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json)
Hash identifier: VGTLY7iXsLtdI13IVyxg+QN6QaHuEaAY0L90JMTD718=
Subject key identifier: 61:CA:9F:31:49:74:A2:2A:FC:8D:32:74:2D:5B:25:D6:C0:1F:B7:DC
Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Certificate serial: 019922FA3688345BD117DA5018FD3729B0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
Manifest number: 1417
Signing time: Sun 07 Sep 2025 07:00:47 +0000
Manifest this update: Sun 07 Sep 2025 07:00:47 +0000
Manifest next update: Mon 08 Sep 2025 07:00:47 +0000
Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: Hb46WgxjmrbvB91kXCl59khchmHfAtaXc3m1jbs6GNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:36:88:34:5b:d1:17:da:50:18:fd:37:29:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Validity
Not Before: Sep 7 07:00:47 2025 GMT
Not After : Sep 8 07:00:47 2025 GMT
Subject: CN=61ca9f314974a22afc8d32742d5b25d6c01fb7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:80:4d:36:78:bf:42:d3:15:1c:cc:e5:a6:
f1:76:ed:05:b1:85:19:67:e4:b6:13:19:01:74:d2:
4a:af:1b:20:77:08:55:fc:a9:b7:e8:54:02:15:05:
ed:03:12:af:da:48:64:93:1b:03:30:23:82:03:bd:
9e:26:d0:bb:17:f7:29:fc:5f:00:d4:68:07:b7:43:
a5:d0:37:78:c3:23:02:38:cd:2c:00:37:d0:22:05:
c7:a6:87:0f:50:aa:64:42:06:dd:91:e5:14:93:37:
ee:9f:49:c0:a2:43:b4:6e:a2:bc:bf:fa:78:6c:11:
62:55:77:93:8f:c3:ac:d9:a4:c6:95:fd:8d:17:eb:
b6:af:62:d3:0b:12:c4:45:b1:68:a9:ed:eb:4c:5b:
65:1f:3d:72:64:3a:cb:f3:b7:af:68:0a:31:5b:e4:
3d:2f:09:9f:c8:af:79:7f:31:f7:37:66:36:b7:09:
72:de:1f:84:b4:5b:db:8c:17:aa:88:0d:24:12:e5:
d7:ed:96:1f:4e:25:99:b9:de:7f:ef:8f:72:93:40:
2f:cf:ef:fa:88:91:d7:d8:3c:25:62:9b:4d:45:5d:
14:6d:4c:cf:4e:ff:29:30:06:d9:64:f2:2e:1c:2b:
57:01:13:08:78:73:6c:a1:ae:ad:77:cf:e0:c1:c6:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:9F:31:49:74:A2:2A:FC:8D:32:74:2D:5B:25:D6:C0:1F:B7:DC
X509v3 Authority Key Identifier:
keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e1:99:0f:39:37:7f:d3:fd:4d:d2:01:cd:5c:cb:bc:15:0b:
b0:e3:5e:ab:08:d9:6b:d8:1c:f8:b6:be:d0:6f:98:8b:64:8f:
f8:fa:18:da:b4:2b:cf:af:e6:16:9b:18:5d:f8:6e:ad:12:4a:
56:4d:87:30:85:dc:4c:8a:fc:b8:c1:c8:82:6f:43:5d:d1:7b:
88:7a:5c:d4:00:8f:7a:5f:b7:d4:f4:22:36:97:75:71:4c:13:
08:31:e2:27:5f:37:1a:69:b8:1f:a4:ed:56:52:93:74:2f:45:
ff:17:11:bd:2f:84:39:61:ea:25:29:0e:06:92:ae:82:df:31:
4a:19:af:a3:9b:4e:0b:4c:57:31:f7:a2:c8:83:11:bf:dc:b7:
a6:9c:bf:50:6c:84:95:10:ad:07:b7:50:30:86:fc:43:37:9a:
69:39:0e:85:0a:e6:61:c3:67:4f:6d:f1:4e:6a:97:0f:22:0f:
e7:f0:f6:7c:19:0a:5a:de:a2:d4:f6:5f:06:d3:93:33:d5:24:
e7:44:dc:34:ad:6a:3b:e9:49:18:e5:14:ef:49:8b:a5:05:a6:
bb:32:7f:10:3e:40:97:ef:f4:9e:51:a3:a7:a7:60:50:11:66:
a1:5d:7c:7e:5b:a6:e6:8f:dd:ea:64:32:4b:ae:89:5e:a3:29:
12:2c:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:18 2025 by rpki-client