Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: iU2ROM/yd/X77YAcLgd3S5MD+URDklpRW/6CD0eS5Qs=
Subject key identifier: 92:C7:DE:95:FB:39:B7:AD:2D:BC:76:04:D9:56:1A:8A:AB:12:4F:B0
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 019A7225C3BC5C21B48A3C54CDFA00BDB75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 0511
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: qHqZvrPWGFZgXQQdoDHd/p6l8+uDIs98Fp1Hn7zfLGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:bc:5c:21:b4:8a:3c:54:cd:fa:00:bd:b7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=92c7de95fb39b7ad2dbc7604d9561a8aab124fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:a5:95:b4:b5:3f:0b:8e:a0:56:b4:a5:d0:
18:92:d1:a2:2d:19:0a:13:2a:37:9c:03:39:f9:90:
2d:96:71:44:b1:fe:e7:96:19:54:40:8c:3c:7b:da:
1a:58:d5:ba:a1:77:43:75:f0:93:d3:72:a0:38:90:
e6:90:6a:8f:c8:f3:78:7a:79:86:43:a0:81:be:3f:
2f:c0:34:74:b7:33:9a:26:3a:10:4a:be:37:9b:a7:
e8:54:7a:be:53:4f:83:79:e4:02:15:e6:83:91:f4:
75:ee:ae:b5:70:8a:c3:13:4a:f2:e7:e8:0b:96:4d:
9c:c7:1f:41:57:a1:6d:40:cf:18:ae:3f:dc:7c:f9:
82:0e:1f:0f:dd:ec:5d:0f:be:f7:cf:48:a6:d5:dc:
2f:cc:50:df:77:aa:15:67:5b:04:6f:6a:92:75:78:
3e:a8:e3:5b:16:26:ab:64:2c:70:36:d1:21:6d:55:
e1:1d:2b:82:76:d0:3b:bf:de:d2:c4:c7:a2:e6:25:
89:12:0b:5e:2b:e3:93:5d:41:aa:e1:9d:94:13:8f:
65:70:9f:58:13:a0:c5:e4:a4:33:57:83:d3:9b:7e:
cb:41:fa:ae:bf:ff:3c:02:0d:c2:e4:2e:e5:7b:b6:
b1:86:6f:9c:c2:0f:d3:39:1a:ec:ed:06:0b:9d:84:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:DE:95:FB:39:B7:AD:2D:BC:76:04:D9:56:1A:8A:AB:12:4F:B0
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:c7:96:ec:ea:df:18:90:64:e9:21:6b:79:ee:f2:3d:e3:
2f:b5:bc:ef:05:50:45:a3:1f:cf:56:23:46:36:e8:8e:36:d8:
88:59:ce:65:7e:3a:43:5a:1c:39:4a:92:31:c9:d5:e9:13:37:
2e:18:69:d6:5b:af:69:ca:4d:68:b0:11:38:80:24:36:9a:36:
25:24:15:68:7f:9f:e6:f2:e6:ba:e7:5c:4f:fa:aa:ce:6f:e0:
59:a6:4e:2a:60:c9:7f:96:c3:06:2c:3b:25:82:c6:a0:dc:c0:
54:92:01:77:06:00:f5:73:0a:71:eb:4b:10:1c:93:7c:2b:de:
ad:93:d6:55:fe:59:29:77:d3:34:16:b1:9d:a1:ed:8a:9a:df:
b9:b3:ec:8a:0a:fb:47:e5:fb:7a:f1:d9:2e:c2:88:34:f9:a2:
ea:21:13:eb:d9:87:cd:93:92:43:c9:2a:fd:0c:7b:0f:9a:43:
08:e6:de:03:33:64:ee:fd:72:ce:74:1f:f7:3d:05:38:87:05:
42:c6:d3:88:18:a4:c9:83:db:11:2f:4f:bf:45:ec:77:85:c9:
fb:65:72:6b:82:5d:5c:3a:4f:c3:fe:f0:3a:d7:55:45:81:6b:
32:92:f3:f0:8d:d1:91:c8:f1:9e:d2:5a:51:2d:c6:a9:0f:e1:
ef:5d:db:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcO8XCG0ijxUzfoAvbdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZmQ3NTRmMzA3N2NkNjBmMDA5YmUwMjZjOTA4NGU1NzI5
NzA2NjAwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
Eyg5MmM3ZGU5NWZiMzliN2FkMmRiYzc2MDRkOTU2MWE4YWFiMTI0ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tallbS1PwuOoFa0pdAYktGiLRkK
Eyo3nAM5+ZAtlnFEsf7nlhlUQIw8e9oaWNW6oXdDdfCT03KgOJDmkGqPyPN4enmG
Q6CBvj8vwDR0tzOaJjoQSr43m6foVHq+U0+DeeQCFeaDkfR17q61cIrDE0ry5+gL
lk2cxx9BV6FtQM8Yrj/cfPmCDh8P3exdD773z0im1dwvzFDfd6oVZ1sEb2qSdXg+
qONbFiarZCxwNtEhbVXhHSuCdtA7v97SxMei5iWJEgteK+OTXUGq4Z2UE49lcJ9Y
E6DF5KQzV4PTm37LQfquv/88Ag3C5C7le7axhm+cwg/TORrs7QYLnYSNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLH3pX7ObetLbx2BNlWGoqrEk+wMB8GA1UdIwQY
MBaAFCr9dU8wd81g8Am+AmyQhOVylwZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xOTg2Y2MtZTM1MC00MTVhLWFkNzMt
YjQwMTNkYjhiN2MxLzEvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xOTg2Y2MtZTM1MC00MTVhLWFkNzMtYjQwMTNkYjhiN2Mx
LzEvS3YxMVR6QjN6V0R3Q2I0Q2JKQ0U1WEtYQm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZczHluzq
3xiQZOkha3nu8j3jL7W87wVQRaMfz1YjRjbojjbYiFnOZX46Q1ocOUqSMcnV6RM3
Lhhp1luvacpNaLAROIAkNpo2JSQVaH+f5vLmuudcT/qqzm/gWaZOKmDJf5bDBiw7
JYLGoNzAVJIBdwYA9XMKcetLEByTfCverZPWVf5ZKXfTNBaxnaHtiprfubPsigr7
R+X7evHZLsKINPmi6iET69mHzZOSQ8kq/Qx7D5pDCObeAzNk7v1yznQf9z0FOIcF
QsbTiBikyYPbES9Pv0Xsd4XJ+2Vya4JdXDpPw/7wOtdVRYFrMpLz8I3RkcjxntJa
US3GqQ/h713bJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client