Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: eQhuM2aBmlYk9jd4fZJ38GDdEC4iolpNHNmPOx0Q5Vk=
Subject key identifier: A8:A1:8F:CC:7F:49:50:E4:BC:C4:EA:C9:EB:73:10:B1:2D:63:24:7C
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 019A7112F578F1D884F2481BDD49513D2C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 05F9
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: d8Ng4Ct5EYY2ZwT6IUPv9c0UOu/VgMuZJyLwkcF8tKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f5:78:f1:d8:84:f2:48:1b:dd:49:51:3d:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=a8a18fcc7f4950e4bcc4eac9eb7310b12d63247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:70:35:a0:df:08:d5:2a:83:5b:a8:6c:0b:
3e:a5:4c:a1:89:05:3a:ad:15:a9:07:df:80:23:cd:
e9:ac:ab:46:b5:ba:44:0d:0d:e3:95:6b:a9:39:64:
e9:ff:c0:b2:ed:c1:ef:4d:16:53:3e:32:88:ce:6e:
c4:1b:3a:74:86:fb:67:99:78:c4:b7:c1:82:b7:52:
a6:70:e1:52:46:e6:db:e9:c4:b0:8a:77:f7:60:8a:
aa:ed:16:f0:65:32:aa:cd:e1:5e:c7:03:01:0d:c0:
ad:76:f5:de:e5:c7:7a:df:34:61:78:98:7b:18:d6:
78:40:b7:76:e5:86:fb:4f:c7:4a:07:c3:b2:f5:c0:
c3:3b:57:3b:80:b2:77:3d:80:af:bd:2f:1a:fd:84:
03:03:45:9c:bf:b4:98:8f:9e:a1:71:47:c1:2a:84:
8a:b3:33:f9:3b:7c:2f:39:74:dd:f2:f9:0e:85:73:
ae:d8:17:7c:00:92:09:a8:10:6b:a3:58:e4:28:b2:
61:65:e2:bd:a0:ba:a4:da:17:9a:0f:41:dc:87:17:
e1:d7:cf:1e:3a:28:82:eb:86:f4:4e:8c:68:84:8f:
8c:ac:e7:3c:9d:c2:66:5b:ff:20:79:6d:de:95:05:
50:84:64:23:45:3a:2c:6f:19:77:a6:05:bb:65:b3:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:8F:CC:7F:49:50:E4:BC:C4:EA:C9:EB:73:10:B1:2D:63:24:7C
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:a5:4f:ab:33:d0:8d:d4:1f:b9:90:d4:24:ca:4d:a2:1d:
c5:dc:51:b3:ee:68:d6:ca:a5:ac:69:07:93:d3:c7:72:42:7a:
dd:79:30:8c:5b:98:d0:51:c0:ce:eb:7d:cb:46:72:9a:83:79:
f0:90:0e:51:54:ef:cf:0d:be:de:39:56:02:8a:be:3d:79:96:
b0:f8:36:f2:b6:3b:a8:1b:10:2b:ad:1b:e7:56:ab:2a:b9:c5:
60:9c:d3:87:c3:30:50:1a:1b:0e:e3:12:b8:9d:96:19:92:ce:
e2:70:0b:3f:b5:90:7c:10:04:51:02:ea:20:85:d8:67:60:93:
e7:91:f7:c9:72:78:57:97:ce:1b:94:e1:09:2a:d6:40:07:c4:
78:1f:8a:1b:c7:f0:1b:25:35:de:08:52:cc:20:df:c2:5c:88:
5a:1d:e9:0c:c9:6c:75:06:93:fb:51:b7:8d:18:41:53:b1:74:
a9:43:40:bc:49:04:30:5e:42:6d:81:e9:8d:2c:e3:8d:4a:d0:
ba:bb:5b:99:69:cd:7a:b3:b4:e1:74:59:96:d5:ab:92:93:66:
b8:22:34:c9:27:89:a1:d6:fb:31:c4:b8:87:3a:c7:fb:46:2e:
35:8b:09:aa:01:79:b1:20:06:71:ad:95:35:92:d2:17:1f:1e:
4b:6e:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client