
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: Znuu2NpyXXQI9MmI/9n5iytT3IHDnqOQzof7yC+u1xE=
Subject key identifier: 37:4E:DD:EC:4D:75:70:A1:DD:08:DB:8D:EE:E3:A8:34:3E:6E:95:3F
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019A1D2C999636D7EE837D4C57818BC3E3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 1158
Signing time: Sat 25 Oct 2025 21:00:53 +0000
Manifest this update: Sat 25 Oct 2025 21:00:53 +0000
Manifest next update: Sun 26 Oct 2025 21:00:53 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: 0b3TRulr/4OBVcDS5rStBVtXI7/01OGo7oa51VprlcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:99:96:36:d7:ee:83:7d:4c:57:81:8b:c3:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Oct 25 21:00:53 2025 GMT
Not After : Oct 26 21:00:53 2025 GMT
Subject: CN=374eddec4d7570a1dd08db8deee3a8343e6e953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:1c:b2:60:cf:5d:54:a9:5b:4f:4e:ac:de:
7a:49:49:70:ac:cf:45:14:57:9a:96:db:f7:6e:92:
d1:d4:24:86:ae:24:74:b4:20:ea:aa:79:35:0c:22:
25:2f:ee:aa:64:96:71:84:e2:03:0f:61:c9:cc:0e:
c3:3a:67:d9:1d:3c:af:20:82:ee:cb:14:a4:b0:c1:
01:74:b0:c4:47:b7:0c:c8:0a:3a:c8:ac:01:9f:a9:
0a:5f:3f:af:51:2f:ac:28:8d:cb:b1:6f:c4:26:32:
06:74:c9:95:b7:02:f1:7c:44:e4:3a:ef:08:05:e8:
fb:92:cc:e1:47:42:63:e3:4e:29:52:83:5d:94:1f:
5c:a8:bb:9a:94:75:ff:c2:76:3f:97:9f:23:11:85:
c8:35:05:45:a5:99:03:f6:72:12:33:8b:01:25:27:
e5:5e:19:a8:39:61:1a:00:ed:6f:99:ae:05:f8:52:
3a:1b:a6:04:03:4f:1d:99:5d:4e:7d:22:40:e3:c8:
52:9e:64:0a:d8:4d:e3:4b:e9:6e:63:df:a0:2b:a3:
22:59:95:6a:b8:b6:a6:34:f0:fd:72:07:f3:ff:ab:
b8:4b:6a:a4:c8:62:8f:ce:90:06:30:5b:ad:32:d9:
dd:81:e7:58:8e:16:50:75:5a:d7:22:73:5d:a7:c8:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:DD:EC:4D:75:70:A1:DD:08:DB:8D:EE:E3:A8:34:3E:6E:95:3F
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:60:26:03:57:70:96:06:c6:02:f7:8c:21:b0:36:95:00:8d:
7e:4c:ea:7f:e5:b5:f5:05:06:f9:2d:89:3b:be:a0:f6:fc:98:
18:2e:ce:d3:39:7a:71:9e:41:74:02:eb:85:05:67:1f:89:93:
36:6a:70:87:09:28:f9:16:b5:a3:e3:6a:7c:27:c8:0d:d7:db:
be:69:23:26:bf:17:76:cf:2d:42:06:f1:48:79:bf:36:0e:fe:
57:2f:c0:9d:53:cb:f9:1f:49:43:e0:cd:32:a8:4c:29:ad:d0:
16:e6:06:eb:23:10:41:62:43:6f:e2:1e:6f:aa:78:ad:cb:59:
63:5c:a6:fc:5d:cc:f4:88:0a:75:b0:35:f0:62:10:dd:e7:8b:
a3:54:f7:d9:c6:c3:38:8c:de:4d:e9:26:21:cf:7a:aa:29:95:
fe:a8:51:2a:5d:91:45:ed:36:42:07:c2:dd:d6:13:27:b2:46:
69:0e:64:da:d0:05:9f:1d:d9:9a:03:04:df:a5:00:68:75:e5:
5e:83:cc:68:89:c1:00:ed:6d:18:ef:47:3d:61:66:b8:29:f0:
62:e7:32:9a:59:4c:cc:e4:e6:ed:1f:5f:3a:1a:c6:10:fe:04:
3f:21:ee:f0:5f:49:bf:cf:ab:a7:40:9e:34:01:fc:c4:1d:85:
2a:64:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:08 2025 by rpki-client