Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: SSAgsenSotT4qPwGJxR1eK/7OdRVL4aePcWj9nzFFzQ=
Subject key identifier: 02:A3:11:9B:AB:AC:FE:74:6D:4E:7D:B8:12:ED:68:CC:73:BB:0E:01
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019A71B8EE29CD1A5CAF313211FFACC360DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0DEB
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 0TIefvpmAlkjBHqmI9tyKI8VkFlJcdDpDFoHZXXxvSU=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ee:29:cd:1a:5c:af:31:32:11:ff:ac:c3:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=02a3119babacfe746d4e7db812ed68cc73bb0e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:e0:89:6b:00:24:b8:ff:cb:bd:1b:2d:ee:
8c:41:ea:b2:d6:cc:8b:cf:a9:6b:e9:8f:28:38:2b:
1c:13:0f:38:75:22:2b:c3:44:a0:44:5e:ca:ea:6f:
24:b1:ff:11:df:d3:d5:5e:1a:8e:dd:6a:d6:e0:a6:
62:9f:e2:b0:57:11:ec:c8:6b:7f:09:f5:b9:36:18:
ff:fa:45:43:81:b6:84:6e:84:46:64:bc:8a:98:84:
23:2d:7f:11:ab:f3:ee:71:29:76:11:7a:2f:57:3d:
cf:f2:de:78:76:12:0c:f6:bf:40:f7:df:f7:9b:a6:
db:c0:9f:ac:43:c8:4e:47:cc:33:2f:47:09:01:70:
6f:90:19:de:ee:4f:d5:2e:52:bd:1e:1e:46:82:9c:
b8:d0:b6:f5:f0:f0:e3:07:a6:c0:7a:11:85:cd:5e:
6a:ec:bd:d7:52:3b:71:ea:75:59:55:db:ef:c6:4e:
16:17:18:40:03:d6:ca:1a:a8:e7:da:0f:a0:90:87:
78:cc:08:99:bb:e9:4f:ae:72:d3:2d:19:04:11:42:
05:4d:42:cd:b6:25:de:63:41:b1:d0:72:81:05:f5:
fc:1b:38:dd:88:9f:55:c6:d7:9a:c7:67:5a:ef:68:
55:52:56:64:f3:45:a7:48:02:02:b6:dc:c2:de:52:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:11:9B:AB:AC:FE:74:6D:4E:7D:B8:12:ED:68:CC:73:BB:0E:01
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d6:1a:fe:e5:9e:8f:45:c9:48:71:18:6d:3f:f5:3e:91:45:
7c:ab:25:f1:19:90:83:9b:4b:5c:5d:66:b1:36:1b:71:20:14:
ce:1f:30:21:30:6f:53:0d:a6:7a:e6:f1:28:73:9f:ea:31:ea:
b2:6d:a7:25:34:cb:f0:5f:84:cd:8b:21:a7:4f:9d:06:60:66:
b0:e6:12:4a:72:4d:89:24:86:6d:79:79:e5:78:8d:db:7c:1f:
68:65:a5:73:ee:47:d6:27:4d:f8:68:48:3c:9d:f6:52:c3:e2:
b7:3e:23:e7:82:75:92:b7:68:7b:3b:ea:c7:62:82:5e:a2:b3:
fa:52:72:cb:de:16:e0:26:64:02:ba:15:71:99:6f:fb:be:a3:
9d:59:45:b9:72:59:54:0d:df:e0:b6:4d:b9:85:28:21:f7:75:
b8:50:24:f6:e1:2e:b6:92:a0:a0:85:cd:ab:25:bd:a2:63:d1:
7d:49:f4:75:e9:f0:1c:8a:49:47:40:3c:45:66:fc:38:82:40:
00:74:d9:b8:9a:90:a4:d9:78:80:95:a7:6f:02:d2:93:40:56:
b4:84:63:58:b2:86:1e:08:52:6e:06:20:7f:41:c9:e6:34:c4:
91:c3:fd:ce:97:d2:8d:a1:88:38:e4:e5:94:ad:f4:a9:c4:a5:
5c:67:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:21 2025 by rpki-client