Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: k2zi7EyAAnGjEuOur0nxXlHYz81QV+aTW4qnsBmfvsA=
Subject key identifier: C7:D6:CB:C8:CB:4B:DE:78:EF:CC:D7:D2:F7:96:8A:8E:DF:B9:E4:E5
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 019A72263869E4FC815851BD93BCD949D0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: e0ILLa57tJme14uxOl4hUhhMwlCTSZyKkZJOR6bTBS8=)
2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:38:69:e4:fc:81:58:51:bd:93:bc:d9:49:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=c7d6cbc8cb4bde78efccd7d2f7968a8edfb9e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:1a:3e:3b:20:0a:2a:ab:1e:19:e1:a5:ca:
f7:ec:5e:04:82:52:e1:8c:e0:f5:e3:d2:23:d8:71:
1a:7f:4b:d6:e9:1a:54:93:32:c3:54:93:dd:d5:f5:
b1:4c:0a:bb:2c:e6:a9:bf:96:95:17:83:ba:90:98:
74:a5:22:45:81:f0:10:a1:f0:5a:f9:9c:b7:ce:a2:
e4:40:48:49:13:19:28:83:94:db:cb:63:6d:4b:80:
bc:76:1e:c9:65:fd:07:4c:2a:d2:d3:43:5a:2e:5a:
58:10:93:8a:67:33:18:db:1d:e2:fd:16:c8:5f:d8:
b3:3b:01:b7:c3:7e:96:68:f5:0c:bb:59:fa:68:3c:
dd:6a:69:76:e0:7c:ec:58:04:ff:cb:46:dc:06:8b:
94:3a:59:6d:fc:55:42:d5:de:20:b9:ab:d8:3d:f1:
8a:c4:8c:b2:f7:7e:4e:a8:29:de:0f:aa:0b:df:b3:
e5:8e:b2:bc:d8:5e:6b:e9:43:54:af:17:9a:23:b8:
09:df:fe:30:db:09:94:d4:c1:47:60:d7:d7:b2:80:
22:6b:73:2e:6d:bf:23:fe:5a:bf:36:ad:bc:82:a9:
f3:e2:f4:ba:d4:56:8f:65:c1:c9:ea:71:2d:41:d7:
9c:50:58:b7:d2:3f:f0:a4:6f:84:d6:8f:1d:99:d3:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:CB:C8:CB:4B:DE:78:EF:CC:D7:D2:F7:96:8A:8E:DF:B9:E4:E5
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:a2:e1:59:22:9d:8c:fc:90:2b:6b:8f:41:86:75:4e:0a:
ba:b3:42:45:c8:3b:d5:a5:17:24:39:b5:84:74:91:86:14:e8:
99:69:c0:57:00:2e:ef:f8:a8:08:e5:2a:0b:70:40:79:9e:27:
35:1e:cf:bd:83:4f:6c:b4:7d:5b:0e:1f:52:36:e4:64:fe:bc:
c8:b2:1a:3c:61:21:1d:a5:9c:1f:ee:1f:4f:62:7a:c9:27:b5:
e4:7d:d0:51:80:59:f1:04:a4:b7:14:62:82:08:dc:2d:d2:1c:
4c:95:5e:62:99:87:4b:61:ae:fb:b0:2b:65:15:8e:90:dc:ad:
e9:9c:13:f0:a1:76:11:21:9e:8c:3b:e8:df:a4:0a:d6:15:bc:
1c:77:a8:8c:f2:96:42:57:55:38:ef:3b:ea:e7:c0:69:06:98:
66:82:de:54:f3:bf:18:76:b6:0e:4e:21:bb:09:20:c9:1a:1d:
9b:31:66:fa:86:39:59:fe:61:6d:4a:d8:6b:dc:12:ca:b4:e4:
75:7f:40:47:46:94:7f:78:27:ac:bd:f0:29:63:81:d9:c1:81:
43:19:ea:c1:59:55:24:ba:e4:44:a1:d2:b6:a3:7a:8a:02:a8:
b2:85:94:7a:24:d7:22:be:00:3a:4d:b8:fa:e3:2f:49:86:f1:
82:23:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:02 2025 by rpki-client