Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
File: KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft (raw, json)
Hash identifier: JOZPSUltVF9NJXxZaR30nCClrDzqCCyzMHicqOWxKB0=
Subject key identifier: BC:5B:B9:55:5C:46:53:5B:AB:3E:1E:0C:02:2A:5A:5C:F5:CC:22:64
Authority key identifier: 28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
Certificate issuer: /CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Certificate serial: 019A714A2A5A9070454DF9A427FF8752F4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
Manifest number: 0AB1
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl (hash: LYpPVMiZUw/74no/TDZYql78xnYE4ElF1qj93parwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2a:5a:90:70:45:4d:f9:a4:27:ff:87:52:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=bc5bb9555c46535bab3e1e0c022a5a5cf5cc2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:37:1a:a9:d0:f7:47:3e:fa:1e:bc:4f:13:
22:02:23:5a:c1:a9:02:dd:c1:a4:66:97:b6:05:9e:
ec:cd:be:6d:c8:a0:3b:d6:18:8d:1c:cc:63:20:fb:
6e:13:4c:d5:0c:4b:d9:7d:94:e2:51:bd:d2:35:0d:
70:11:53:39:f5:43:e8:c9:5c:72:00:76:f5:c5:d4:
e9:58:d9:dd:b7:d4:b4:4a:7d:ec:06:79:6b:28:63:
c3:58:77:f7:f4:39:0e:2b:e5:5c:32:e5:0f:b5:c2:
06:71:ec:19:b7:a3:46:97:33:de:77:2b:28:11:14:
90:8f:27:36:d3:59:ae:25:02:88:f2:ef:d6:87:4f:
bc:80:8c:5e:13:7b:41:f0:67:91:4f:a2:08:a0:04:
b9:3e:79:aa:5b:d2:a9:14:e3:99:3d:16:a1:95:cf:
c1:e4:35:fb:20:87:21:99:24:51:d9:9f:9a:3f:ea:
9e:2f:54:17:99:a9:39:3b:2e:28:72:8d:2b:6a:f8:
5a:9d:a4:a0:67:eb:ea:4d:78:c3:0e:97:c6:9a:7c:
b0:a7:95:3f:34:03:b8:45:8a:89:49:0d:a7:e1:0e:
49:d4:6f:6f:07:60:57:5b:53:b8:b4:bd:37:74:5f:
c5:30:ab:45:c7:4e:23:5a:00:28:5e:6e:c5:ba:1f:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:B9:55:5C:46:53:5B:AB:3E:1E:0C:02:2A:5A:5C:F5:CC:22:64
X509v3 Authority Key Identifier:
keyid:28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:2d:2c:03:c6:bc:52:3c:2c:a8:bf:de:7a:60:ac:fa:55:
e8:90:3b:12:8b:f7:42:9b:3b:0d:25:1b:3f:b9:10:bd:72:ac:
a2:d5:f2:87:36:1a:50:a6:53:59:8f:f8:09:01:00:b6:6a:a5:
97:a2:f4:87:a1:80:2e:af:a6:85:a1:bc:e2:39:ae:2f:e6:24:
94:02:24:09:ed:19:1e:cd:38:83:b4:4c:14:cb:1d:3b:9a:32:
05:24:8c:ff:a1:87:c0:a8:d4:5d:96:79:12:4c:4c:b5:33:3f:
ab:5a:da:4a:06:dc:35:7b:0b:ff:d1:82:f9:64:b9:65:cf:7c:
0a:51:82:55:e7:ec:26:e1:c5:f3:da:61:cf:59:f7:5a:07:29:
7d:ab:ec:b3:36:39:7b:8d:de:2d:87:0f:d0:46:24:86:d1:76:
6a:a4:01:73:0f:5e:72:15:a0:3b:e4:cc:2c:1f:ff:03:b3:a0:
9e:89:54:4a:c1:d6:56:ae:e0:2a:a3:be:b5:1f:2a:6f:26:4f:
a5:03:d9:08:30:d0:9e:7e:47:57:00:a2:be:ac:a0:a0:1b:12:
33:7c:77:c8:fd:dc:bc:cd:dc:a9:ff:9a:38:c2:a7:d8:69:87:
50:2a:14:b6:85:c0:df:1f:b9:78:45:78:de:76:e0:22:28:65:
cc:f8:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client