Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: 7uEInilj5Q5r19l4mhTrQWBygrqLoO6XoF6IQHM9H0Y=
Subject key identifier: 16:7B:8E:9F:E8:CD:B1:BE:16:55:C1:A8:70:24:83:5E:67:7B:0F:ED
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 019A71B8BFAC98A13B78741190B55051706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: KaMIqyRFl72PAAECoO57+/AvEfUyA8fZp0nmtNdzKqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bf:ac:98:a1:3b:78:74:11:90:b5:50:51:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=167b8e9fe8cdb1be1655c1a87024835e677b0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:c4:89:f6:47:d1:30:85:eb:3f:11:d3:e7:
cb:cc:12:c7:42:c8:66:39:c5:c2:4a:69:aa:76:46:
e8:5a:c7:31:70:00:62:cd:22:f8:48:c1:af:ed:11:
09:be:4b:d5:b8:aa:9b:86:d4:cc:01:0c:a8:b2:aa:
43:27:b2:cd:8a:95:c9:79:4c:4e:d9:8a:71:72:85:
90:36:8d:0b:64:50:ab:e0:2a:fa:11:bd:c0:35:fa:
39:00:5e:88:fb:ad:82:e7:a4:b6:63:2d:1b:9a:81:
17:36:8e:2c:17:ac:ec:4d:c3:49:57:d6:3a:ee:33:
23:1f:76:2c:0c:ea:c5:3b:ae:f4:c9:19:43:69:64:
d7:f9:40:e0:92:5c:04:30:4e:42:f0:57:a6:f8:73:
ba:4a:d9:5f:b3:6c:e5:9f:3b:9f:20:33:17:35:4a:
e1:48:22:5e:ed:19:ea:cb:23:3a:ea:5f:e4:40:5b:
93:85:3f:f3:dc:cc:d5:cf:6f:e2:1b:77:e7:99:81:
73:b2:0e:43:4b:35:75:91:2b:aa:2d:ce:0e:92:ab:
65:4b:98:89:92:f8:53:24:5d:44:22:e2:4c:db:0e:
f0:b6:14:cb:c4:01:07:03:cb:76:a3:80:ad:e9:63:
0c:1b:4d:a1:72:8e:cc:81:28:80:43:fe:a6:94:d3:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:8E:9F:E8:CD:B1:BE:16:55:C1:A8:70:24:83:5E:67:7B:0F:ED
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:19:41:96:2d:84:da:4c:10:47:6c:2a:4f:56:44:8a:f5:26:
e9:cc:1a:ac:c5:59:54:f2:22:d5:19:e1:1e:fe:a9:1c:04:e0:
7a:3b:8b:f2:3f:73:f6:7f:62:9e:47:0a:47:b7:44:7d:5b:cd:
d6:05:68:dd:0d:f4:22:14:f2:a2:f4:92:31:74:d4:c0:ed:e9:
24:44:ca:24:5a:65:a9:25:da:6f:dc:21:58:41:ea:6f:2a:32:
3d:89:02:94:1a:1b:47:7c:d4:16:77:3c:80:81:c7:2d:43:dc:
ab:47:29:4e:cb:e4:ea:cc:56:92:cf:20:24:ad:be:28:4c:c8:
ff:79:36:95:ab:1d:e5:a0:02:d2:f5:63:5e:7c:1c:1a:ca:a9:
19:a6:a3:d4:e1:54:ea:58:d3:17:3c:46:08:4f:76:61:3b:34:
e7:c2:7e:51:18:7e:43:f1:71:6f:d2:37:dc:1c:64:e5:bd:ee:
98:91:00:61:7d:f5:9b:06:9f:04:44:2c:37:49:35:e9:86:4d:
02:53:87:2d:26:b4:8b:15:a4:45:3a:e3:7a:fb:74:73:9b:81:
34:59:bf:c2:73:d3:35:e7:fc:9f:67:c1:fe:57:81:eb:04:84:
05:48:bc:83:ea:c8:cc:b2:15:f0:6a:dc:1a:06:99:08:2c:04:
64:b6:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:45 2025 by rpki-client