Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: aBaHQcHdEqHl2ltQ+ueUaCVRSApWwbT7n9ANuOR8H90=
Subject key identifier: B8:BB:2F:58:C9:46:3A:BC:74:53:EC:9F:69:CA:25:8B:48:EF:2A:13
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 019A71EEC48B60EB0B3E8D1022A76FB126B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 05A1
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: sawMgyT/+lq/FsYxe+A+IscP/tJ1+RE6n2HJ/hzB0Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c4:8b:60:eb:0b:3e:8d:10:22:a7:6f:b1:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=b8bb2f58c9463abc7453ec9f69ca258b48ef2a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:09:b3:b1:6f:de:7d:ea:f2:e1:a6:c7:f7:
11:49:28:86:c7:15:c8:54:39:5a:25:b3:3b:d5:e0:
6e:fe:a4:b3:c0:05:ee:c0:7c:d5:99:fe:db:a9:d6:
8d:d7:31:51:fa:ca:b1:06:16:5a:ad:7f:bb:70:f3:
aa:eb:ef:d6:09:1b:dd:46:53:e4:c2:6a:0d:83:cb:
0d:cb:e6:88:ec:0e:50:63:25:23:bd:62:ca:c0:c5:
82:7a:02:a1:f6:75:9d:9e:72:12:c4:86:41:d1:06:
d8:08:83:43:59:08:ad:cb:87:2f:f6:18:c2:f9:8d:
bd:e5:9f:6c:8f:3c:94:e6:6f:27:7f:6e:7e:89:45:
7f:13:85:cd:e0:e6:6c:87:3c:b5:f4:ae:35:c8:71:
fb:99:30:a7:e3:d7:bc:fd:c8:b4:d8:a4:ef:fe:fd:
ef:46:95:08:22:ea:da:05:f8:17:59:8b:a2:4f:00:
6d:35:88:be:a2:07:80:89:07:2e:5e:da:bb:a6:1e:
0d:aa:38:a1:76:c9:a2:e1:1c:d3:bd:54:24:65:70:
21:65:4f:16:3f:99:d1:8a:3d:ff:ea:55:3f:b7:68:
1e:ad:a5:75:6e:2d:be:f3:e8:23:d3:5a:a0:55:03:
9a:e6:0c:95:f8:b3:52:84:ae:95:fb:6e:84:19:28:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:2F:58:C9:46:3A:BC:74:53:EC:9F:69:CA:25:8B:48:EF:2A:13
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:ed:c1:72:fa:bb:84:2b:c6:58:cb:75:58:d5:89:c0:b1:
37:96:e4:2b:79:b8:25:5d:33:c0:cb:35:99:93:b9:00:e2:fd:
ef:dd:b4:72:34:e2:8e:57:1f:74:51:8e:8d:8e:47:9c:91:ef:
e4:8f:f3:01:01:48:13:2b:59:bc:65:25:9a:82:a4:d4:7c:49:
32:bb:16:40:af:84:2a:1c:4a:34:fc:04:f7:55:4f:6b:cf:f8:
65:f0:10:f7:45:08:b1:ad:36:ee:1c:ac:32:01:e9:b2:4e:09:
58:b1:94:73:82:95:9f:39:75:38:31:fd:1d:77:ce:a9:6c:59:
c8:3f:98:1e:c0:ac:4d:9b:60:42:59:73:87:b7:70:3c:b5:35:
70:69:99:bd:a1:0c:2e:a7:12:c3:f6:47:5b:fe:d9:73:1c:c5:
58:0b:04:07:fb:f0:13:19:71:08:35:3f:6e:08:67:6d:c4:67:
b8:da:d8:5d:76:5c:3f:e9:78:5a:34:4b:ab:6f:f6:6c:f7:9b:
99:90:3a:99:37:fa:06:5b:8c:61:0b:d2:39:d0:5b:b2:cd:d0:
4a:19:fd:08:02:b1:c0:a7:2f:0f:16:18:22:9c:dd:77:ba:fd:
35:84:de:fe:0b:c1:d8:a5:7d:6a:b3:e4:4d:80:02:60:8f:e4:
aa:fd:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client