Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: rUg6ZfXp3eqMvpKot55Peo94s8XwLB+dMaPMoaEcuDo=
Subject key identifier: 49:89:72:BE:F8:B0:E7:A9:C1:E6:23:62:F4:F9:39:52:33:BF:00:BF
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 019A71B88E9BD60C876AF6DD09DDAE6613C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 1487
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: GepkF0BF/LoHBhbIop5vFd/QIAB/4EKjWwWeXrshl2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:9b:d6:0c:87:6a:f6:dd:09:dd:ae:66:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=498972bef8b0e7a9c1e62362f4f9395233bf00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:aa:5f:ee:75:d5:22:cf:4f:f6:3c:64:56:f8:
72:bd:d8:87:8a:bb:4a:f6:62:0f:c3:eb:0b:bb:72:
1b:60:21:19:a6:0c:99:e5:e8:b9:b3:4d:a6:0c:1e:
80:d7:f6:85:bf:9d:26:c6:4d:c8:61:e9:12:1f:b1:
0e:15:1c:98:fd:c2:ac:ae:3b:30:d3:aa:13:9b:1b:
88:ce:7f:ef:39:db:8e:a7:b1:44:63:51:18:50:14:
f1:23:e1:60:7f:8c:9a:62:ec:80:13:11:4d:34:9e:
6d:0f:80:40:60:1a:01:b7:9e:85:16:af:c6:98:91:
59:a2:6c:02:30:bd:ea:39:ae:eb:d6:09:8b:a9:d1:
0d:c8:68:94:3b:4d:a1:be:57:2c:55:46:7e:ee:9f:
7e:c8:cf:b7:c5:7e:35:5a:f3:45:b3:ae:f7:88:74:
d4:8c:f0:79:2f:c8:38:30:db:b4:82:b9:71:b2:41:
be:14:de:75:68:13:d6:fc:46:9e:2c:47:e6:68:b9:
59:c2:bd:8f:51:7a:27:51:49:66:3e:81:62:8e:f5:
39:1e:c1:b3:49:53:dd:fd:f0:88:c1:a2:2c:95:34:
63:d6:2b:93:44:39:dd:08:b0:f0:fe:97:93:9b:56:
eb:68:be:f7:3b:4e:a0:0d:3b:7f:90:ca:25:86:b8:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:72:BE:F8:B0:E7:A9:C1:E6:23:62:F4:F9:39:52:33:BF:00:BF
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:02:e3:7f:94:46:7d:46:1b:66:cb:f7:4e:0d:5d:01:53:fd:
3e:fa:f1:a7:03:fe:20:38:e9:3b:63:29:24:ac:f5:c4:5f:8f:
4b:44:cf:0b:13:c5:f6:7d:4a:32:ee:59:f2:56:01:65:03:ab:
ed:9b:b1:fa:95:4f:c8:76:86:f6:c3:be:e6:11:cc:11:72:4a:
82:7e:7b:ed:2d:c5:fb:43:63:1d:f6:f5:99:dd:c4:65:0e:07:
62:0b:d0:e3:5e:5a:d9:f7:41:31:c1:f2:26:3e:d6:b4:df:d7:
93:95:d7:bc:84:c6:6d:7d:d7:a6:d2:f4:71:fe:43:88:88:10:
e4:3c:8d:8b:a9:ba:66:fa:d0:b5:e6:17:1d:73:62:58:a1:27:
57:16:f0:8a:a5:13:d1:d9:04:be:f5:95:3d:2e:8c:27:2c:49:
f8:93:75:41:6b:2c:27:8b:04:6e:aa:1a:09:17:9f:0e:58:a2:
8b:cf:25:b6:be:41:e7:23:81:de:66:c9:7c:ff:74:6d:7b:31:
ec:d9:ab:ce:37:8c:a0:7f:9d:aa:b8:46:0f:1d:82:52:a7:f6:
a3:63:b1:84:b5:08:b6:b3:b0:15:56:06:76:ce:a7:2f:7d:16:
19:93:3f:c2:54:bc:c2:fa:6b:ac:56:c2:16:86:16:eb:9d:5e:
9b:82:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:56 2025 by rpki-client