Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: Qbj25d8YxbwjSi/kZtyai7j95EzyCMasf8u87RXJ1iM=
Subject key identifier: AF:EB:56:04:82:28:44:76:1B:08:A0:10:04:E7:87:A9:3B:D8:AA:38
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019A71EE66A987CE0134C7F18340FDAA7036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 03EB
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: mQLaOO6GZLGgC9NTc/DBOuty31OGZTTSdO4gn2vMRVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:66:a9:87:ce:01:34:c7:f1:83:40:fd:aa:70:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=afeb5604822844761b08a01004e787a93bd8aa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:8a:79:a9:79:53:aa:f6:3a:69:4f:12:1a:
fd:3e:4b:78:be:dd:89:6d:50:c4:b9:2a:3b:2f:a9:
e7:60:7e:3e:d1:61:d3:c1:f1:76:2e:75:c9:44:c8:
aa:f7:fe:9c:f4:40:c8:24:be:6d:27:4b:e1:04:6f:
c7:8d:23:f0:72:61:36:62:59:3a:8e:c6:40:c8:b2:
e1:54:39:b9:40:5b:3e:a6:3c:b4:08:7b:be:e7:50:
c2:30:8d:f0:df:04:cd:ad:c0:b7:86:1c:d3:39:35:
88:4a:b6:42:40:cb:c0:f8:6e:65:8b:41:fa:f1:c4:
a3:bc:ba:01:1e:4e:a7:95:dc:d4:54:8c:00:9c:97:
ee:6e:94:11:b7:18:1c:01:5c:47:12:fd:6b:1d:3a:
91:80:d4:e8:03:e1:41:02:9d:0b:1c:9d:31:7a:ba:
3c:4c:50:11:82:b3:f4:d1:be:c6:8a:f8:75:b5:29:
85:ff:b0:2f:fc:ed:53:f3:19:2c:52:91:bb:e2:37:
1d:87:19:70:c7:3a:34:7a:ae:3d:06:fd:ca:36:77:
f7:fe:c2:ba:b1:ae:1a:f9:64:f3:2f:ee:3a:b9:b0:
6d:f2:d2:48:cf:b6:4c:0d:a7:31:1f:4d:8e:a3:99:
8f:55:33:fc:8d:aa:a7:f1:64:52:1f:4b:75:e4:e7:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:56:04:82:28:44:76:1B:08:A0:10:04:E7:87:A9:3B:D8:AA:38
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:10:c8:7e:9c:72:e6:3f:50:88:53:6a:10:d1:76:ad:ff:
72:2e:1d:c3:8f:64:e1:01:f0:f5:11:8a:e8:6f:1f:04:c2:c6:
28:ae:19:ce:b4:1c:bb:05:48:6d:d2:e5:45:37:da:78:41:67:
c2:52:4e:cc:3a:03:a9:60:c1:49:11:94:66:b6:53:86:ec:bd:
70:7e:60:ff:59:4e:90:03:3d:2e:ff:fd:5b:58:da:b1:92:5d:
c7:5a:3a:18:eb:50:ff:c4:a7:ff:31:0a:07:38:10:2f:02:34:
00:a4:f9:92:48:2b:5d:87:6d:91:b5:f1:57:ff:1e:07:81:1a:
5b:5a:d2:9e:e4:05:09:e5:15:ac:2e:4f:2a:99:fa:b9:f0:f2:
a2:4a:dc:33:7d:0e:72:be:34:dc:60:5c:0a:0b:28:01:5d:c6:
50:96:ec:c7:f9:69:07:09:98:8d:24:4f:25:6b:3d:e4:05:31:
6e:3b:1e:3a:24:c4:36:9b:33:a7:41:aa:bc:72:e2:f7:19:f8:
a0:32:12:ec:2c:2a:77:29:9d:0c:e1:cc:43:f0:84:c9:bc:7d:
8a:82:9d:5b:a6:63:e7:fe:6f:13:34:4e:cb:87:49:91:43:42:
1e:29:a8:8b:33:78:9f:6e:39:0c:e0:82:7d:84:01:16:72:25:
12:7f:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:20 2025 by rpki-client