Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: eMHzhXro1mrXtnNxjDz8TG2GXVOY72X47Ei3ZxdoEmA=
Subject key identifier: 3E:CC:FB:84:A9:EE:E4:F7:27:E8:20:7B:DD:FE:BD:CF:EB:3A:A1:7F
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 019A725CCE5EA87DDCA8A74F007A760C0735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 1636
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: rrsw62wv99j+tpXfBvYONYclIhZ1DFLvkwJXvRpvtpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ce:5e:a8:7d:dc:a8:a7:4f:00:7a:76:0c:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=3eccfb84a9eee4f727e8207bddfebdcfeb3aa17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ac:87:a1:d4:3c:12:e3:4a:18:c8:2e:d9:e9:
83:7d:29:98:f7:0a:4c:0e:87:43:af:b0:cd:31:ab:
e4:2a:5b:4b:f1:16:36:f9:87:51:78:e1:47:60:aa:
dd:21:62:8b:35:de:58:20:cf:1e:3a:7d:fe:a3:77:
4f:83:5d:b8:e9:f3:16:25:4c:dc:32:de:5a:a5:bd:
13:c6:de:5c:c8:d0:70:31:b5:b6:b2:61:40:6b:fb:
b5:fe:3b:39:f6:c7:11:75:83:46:8a:0f:80:04:32:
98:81:1f:19:cf:21:5f:c2:f0:72:84:ca:2e:c7:c8:
48:b8:38:27:a3:db:ab:49:5d:59:bf:99:d4:88:2a:
50:52:87:86:89:5b:cf:ab:ae:65:f0:e1:d4:92:be:
3a:83:e3:84:3a:2b:97:b3:a3:43:69:da:02:2a:85:
97:f8:3b:a2:5a:dd:40:45:1d:03:f7:b4:ef:4b:4c:
06:25:cb:f5:21:bb:19:01:bb:2a:ff:d6:8c:aa:54:
01:d6:02:91:99:de:16:6c:d4:7b:65:fc:d7:7e:cd:
12:b7:19:08:5a:70:a1:2e:6b:fb:4c:fb:e6:e6:ca:
e9:19:a6:5d:a3:4c:6b:2c:0c:af:35:c4:48:2d:35:
29:9f:9f:da:cd:fc:99:f4:b1:b2:3d:14:db:64:39:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CC:FB:84:A9:EE:E4:F7:27:E8:20:7B:DD:FE:BD:CF:EB:3A:A1:7F
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5f:58:a0:c1:9b:c2:65:4c:38:c2:73:2e:1a:3e:e3:06:6c:
57:b5:d7:2b:00:2d:7f:89:2d:4b:e9:1e:ba:4b:66:a7:1d:39:
3a:ec:57:22:c5:c1:ed:f9:62:94:5d:18:93:21:4a:ec:29:c9:
32:e2:15:90:7b:d9:41:85:f0:71:df:d2:cb:43:b9:1e:ee:be:
b7:b6:b6:ef:4f:1a:31:b8:4e:0a:92:b6:a5:28:13:80:ea:35:
b0:cf:49:c1:7a:02:9e:cc:c1:7c:e9:cf:93:a8:ed:e1:ee:2a:
ef:f3:45:32:a2:6d:60:25:67:5f:bc:af:21:e2:f7:ea:56:b3:
10:22:f7:11:2f:1e:35:a0:c8:b3:54:dd:23:1b:a7:a3:29:08:
14:71:2a:fe:94:3b:98:4c:df:ef:54:78:f6:ab:d0:0e:75:9e:
17:1b:94:e6:6d:c0:eb:a7:16:d8:e4:4c:2a:72:ca:4b:df:d0:
59:4d:a5:30:5f:c9:40:bd:cd:be:5f:21:e9:0b:43:8d:2a:80:
aa:c4:50:29:b5:24:cc:92:9a:3b:60:fd:8c:dc:c1:7f:2b:da:
c1:ad:bc:d2:e9:03:ca:c6:ba:8e:6f:c5:84:87:f1:35:11:50:
a4:ff:e0:bc:0d:c2:4c:f2:73:1e:a4:69:21:36:2e:87:37:b0:
59:ca:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:39 2025 by rpki-client