Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: yieTnj16QvmntW0Tuc4ifCexHc7S5YJhqMpEB1FT5/U=
Subject key identifier: F4:F8:D6:E8:D5:87:6B:02:AD:3A:97:0E:60:DB:F5:3A:46:A3:7A:29
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019A722589BE3205BE690F1142F26521878D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 1061
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: pvQBcQme9IhTGnxJHiOgQca9EwR+fLYgLrxCViKxzV4=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:89:be:32:05:be:69:0f:11:42:f2:65:21:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=f4f8d6e8d5876b02ad3a970e60dbf53a46a37a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:4a:39:b7:c5:3e:68:59:7e:7e:3d:37:53:
bf:4c:15:79:2b:7c:19:76:9c:00:f2:6d:3a:0b:98:
6d:e9:8f:6d:1f:54:a2:da:c4:16:48:90:bc:eb:23:
5c:3f:f5:18:d8:3d:1d:e8:a4:07:41:66:da:ab:94:
13:a0:b5:c2:60:f1:1f:76:2f:08:99:5f:94:c4:ca:
17:15:3f:02:64:ca:62:7f:82:b3:d3:73:d8:4f:ce:
38:23:87:e0:7c:a2:95:4b:ab:32:48:c4:a4:0f:e8:
c6:06:6b:51:4a:0b:aa:67:73:cd:15:86:71:cc:76:
9b:35:83:e7:52:90:f7:33:e9:cd:e9:04:c4:5b:45:
44:d5:ff:76:44:cd:02:01:e8:dc:4d:5c:27:4e:6e:
f4:76:17:6a:41:ea:65:27:6f:74:cf:f4:0b:7c:3c:
5e:ac:34:d9:89:76:48:3a:0d:3a:65:b8:b4:42:66:
62:ad:d4:c4:72:9d:92:e9:8e:35:59:5c:70:ba:3d:
68:88:3a:9a:ee:a1:27:89:27:67:bf:e2:09:2e:96:
07:e8:e6:f5:0d:80:58:c8:02:14:69:bf:0a:57:87:
69:c5:8c:23:51:ad:cd:b7:e5:dc:3b:69:cb:fe:b8:
41:d1:90:56:58:2b:86:b3:a0:e7:c1:f2:5f:88:33:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:D6:E8:D5:87:6B:02:AD:3A:97:0E:60:DB:F5:3A:46:A3:7A:29
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:16:23:1d:d7:e7:af:a6:b9:6d:96:4a:03:87:40:e1:12:97:
49:c5:a0:00:1b:10:ad:a5:5d:9b:23:4a:d0:ef:86:f1:26:95:
b8:90:78:6b:22:fb:4e:8d:05:8e:51:3f:03:92:9c:16:48:21:
2c:08:3c:79:93:9e:61:f3:3c:21:63:66:6c:d6:fc:a6:09:a5:
37:d5:4b:1c:f1:a1:3a:42:f8:71:72:d2:fa:07:aa:17:90:97:
9d:d8:9b:97:55:ff:95:0c:c5:70:74:ef:5f:95:5a:b6:0e:c7:
d1:b6:c7:f1:e5:da:13:47:c5:c1:5f:75:5c:b9:95:83:22:6c:
b2:04:85:64:db:db:5d:f1:b8:c3:8e:cd:d3:b4:ac:aa:6b:27:
a4:77:55:f7:66:4c:de:c9:39:a8:a8:0f:d6:e5:a9:78:97:53:
ce:29:21:61:8a:4f:b1:cb:fa:f6:af:34:13:fe:f8:b7:e8:05:
68:3e:95:63:05:45:9c:ea:1b:09:b8:91:3e:32:cf:5f:47:e3:
10:37:04:ee:c5:0c:1b:1c:4f:a2:42:5e:6f:92:8b:c3:e6:3d:
cd:48:0b:44:5b:87:65:c3:c0:07:99:cc:0d:38:8f:0b:87:5f:
e3:6c:af:c6:8e:aa:af:be:70:e3:2b:cd:3d:93:f0:0b:0c:0b:
e2:12:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:35 2025 by rpki-client