Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: d3SW5MqMLCOSS4DbYO3LICdc4Y/zP+77CkSavIS6Dhk=
Subject key identifier: C6:D4:B9:A7:7F:E0:3E:60:85:15:C5:2E:6C:88:91:DC:49:87:3D:44
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019921E7B3D6EF3E523B74CA1E1F270D3F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 033D
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 4nFEkeGtG5YOijL7qVxddSNkROJTlC0sed55HPpL2mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b3:d6:ef:3e:52:3b:74:ca:1e:1f:27:0d:3f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=c6d4b9a77fe03e608515c52e6c8891dc49873d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:aa:7b:da:73:37:1f:9b:7f:d5:d6:21:f7:
7d:88:45:d2:f9:48:47:29:49:c1:23:e7:c2:0a:a2:
88:f0:3f:3b:72:29:81:c8:83:a3:40:19:3d:e0:d4:
e5:d8:b3:df:97:16:63:dc:c7:dc:59:1e:9d:48:86:
1a:9a:cd:3a:c9:05:87:c5:77:96:06:c2:aa:07:bc:
a6:14:ae:f6:87:88:c4:85:99:c3:ff:4d:d5:a4:ae:
72:52:17:15:8f:9a:2c:e4:bb:92:63:56:d2:77:b0:
65:c1:09:2b:ab:8a:0d:42:36:1a:25:66:10:c0:ab:
eb:c9:a8:bc:af:36:07:2a:33:60:9d:2e:17:2e:cb:
54:01:c4:d7:d5:01:21:87:84:1f:98:34:19:31:2b:
65:f8:36:f3:61:34:1f:e6:82:08:b2:be:40:8b:1c:
09:5e:b8:47:1d:93:4b:c5:21:47:96:85:81:da:50:
fc:11:e5:98:b4:16:29:a8:cf:f9:bc:3c:05:12:60:
36:ad:a0:f2:5b:c7:e0:82:86:b3:3b:c4:63:52:5d:
05:80:e5:be:4a:8f:26:3b:83:bb:ce:54:dc:70:b7:
8b:b2:87:ad:d6:57:d9:6a:58:60:40:d5:30:07:3f:
32:48:21:2c:aa:43:99:88:27:e8:40:5c:0c:67:08:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:B9:A7:7F:E0:3E:60:85:15:C5:2E:6C:88:91:DC:49:87:3D:44
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e0:75:fd:3f:43:2d:12:9c:47:02:98:b3:c3:08:f1:d5:5d:
be:ac:fb:5f:a7:5c:b6:ae:31:24:07:97:ae:1a:3a:29:69:b6:
99:d1:06:fa:05:f6:1b:03:58:6a:e0:26:05:89:2b:7f:ec:51:
bf:3f:ab:29:e4:c9:1f:5f:0d:5c:09:c6:05:0e:db:b0:4d:80:
64:e7:99:e9:0c:9a:d6:94:79:c3:2a:9a:79:d5:b2:e0:dc:20:
82:48:e8:78:ba:a7:f5:4e:0c:1d:28:3f:db:01:43:2a:58:76:
23:74:93:15:a1:09:2a:98:3a:d5:42:7e:66:83:40:98:36:e7:
0c:ec:24:aa:c9:fd:9e:70:c0:2e:fe:82:74:ed:63:50:c0:a0:
30:22:bc:72:07:48:6d:f2:74:9f:88:85:cb:f8:08:a9:a1:84:
4e:4a:35:5d:24:5c:e9:86:4c:07:e5:44:ad:53:b2:2c:bd:2c:
2e:45:86:89:00:c1:e8:91:be:38:83:6a:09:f3:2f:ef:ea:12:
bf:2a:ba:dc:74:fb:61:5e:5a:4e:db:c3:9d:ba:c0:da:7c:8b:
21:ee:fe:33:42:bc:f5:00:e9:58:c1:6c:26:2f:74:b6:c0:31:
b1:8c:8c:24:87:96:9e:68:33:9c:94:0e:fb:cc:5b:89:f9:8f:
06:60:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client