Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File: kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier: 5qliBs98DGj6LS70SMR/y7c/AnwPxOHK/fBBj/yhsjM=
Subject key identifier: 3E:50:AB:A2:B4:39:B4:D6:00:D9:64:9A:DA:25:37:BF:9E:6B:A7:A4
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer: /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial: 019A725CAE773EB1871CF0DED6FCD508F8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: YFYsVYTi0U00XRmU0FKjXQBlwvX3g9KHt/f/rRVH4DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ae:77:3e:b1:87:1c:f0:de:d6:fc:d5:08:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=3e50aba2b439b4d600d9649ada2537bf9e6ba7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:8e:17:35:04:fd:d4:3e:f7:4d:2f:d8:f5:
e5:55:fe:ca:9a:c0:7e:62:02:22:9f:e0:1a:aa:6b:
6a:56:f6:c7:3f:89:d2:bc:b9:27:0c:5c:5b:95:1b:
48:a2:8e:3c:54:f5:9d:bf:8a:76:e3:e7:16:86:95:
f4:9e:c3:64:0c:15:a4:4e:83:b1:8d:f7:1f:e5:43:
a2:09:79:34:c0:f7:60:f8:de:3e:60:63:a4:e8:43:
be:88:2f:f4:d5:d4:c8:db:1a:81:b8:ec:60:0c:bc:
fd:05:13:1f:99:e1:3a:91:69:94:e4:a4:35:df:64:
d0:3e:e8:9e:b2:66:85:11:d3:b2:d0:00:78:2d:aa:
e6:dd:ae:ec:af:60:9e:f4:fc:6d:b3:ce:ab:77:1e:
4a:77:60:eb:1a:de:ec:bc:69:e9:1b:66:a9:56:3e:
d8:51:b4:c0:86:14:c0:6e:be:30:11:42:dd:35:17:
49:4e:af:67:52:e2:40:ab:25:ea:70:d9:f9:a4:e5:
da:74:0a:c0:56:4c:5e:93:94:79:6f:9e:bf:6d:67:
83:e6:be:b2:3e:d4:04:65:e7:35:5d:c8:ce:25:2e:
50:0c:9f:95:13:d0:79:94:e3:b5:f6:2c:31:7f:bd:
67:49:72:66:27:cb:92:c4:26:df:ff:42:50:1d:51:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:AB:A2:B4:39:B4:D6:00:D9:64:9A:DA:25:37:BF:9E:6B:A7:A4
X509v3 Authority Key Identifier:
keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2d:1e:d0:26:d3:3a:8e:0e:85:d0:6c:ab:96:17:7e:7f:6f:
49:89:35:42:e9:6d:bb:fb:33:6a:b0:64:cb:f5:b1:7a:f7:d3:
3b:9f:c0:6b:83:62:bf:71:4a:2d:a3:66:30:65:71:e0:be:f3:
3c:c2:74:26:90:c4:4d:05:f2:df:9f:6d:36:f6:ce:e0:63:da:
cf:42:45:d2:45:67:aa:aa:40:d2:ca:ba:16:7f:60:98:96:99:
9b:83:f8:5d:f4:2e:0c:e8:5f:c5:e8:b9:66:a6:5d:0a:cb:2c:
cd:99:07:9a:22:50:e1:b0:ec:46:d9:80:37:60:17:12:8b:75:
92:c8:41:28:d8:34:18:c8:7a:62:aa:15:36:f3:70:fa:e8:1f:
6a:72:30:38:23:01:61:02:34:c0:a0:7f:42:88:b5:e3:d7:54:
88:7d:ac:34:3f:4d:6b:83:5c:9a:ad:31:e7:48:87:16:9b:07:
f7:eb:e7:ec:3f:f1:04:05:6c:76:4e:98:e6:1a:39:86:06:a0:
1a:a1:3f:4e:ac:f0:80:1a:45:7f:a2:2f:76:f5:41:b9:02:9c:
14:0f:64:4c:c1:96:cc:fb:74:58:6d:20:8e:6b:89:52:f4:a7:
7d:f5:5f:13:5b:5f:36:19:55:c9:2a:71:34:b0:e3:ea:f5:98:
1d:5d:ab:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXK53PrGHHPDe1vzVCPigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOWI3YTk3NGVkMzgzYWMzOGU4ZmMyNDg3OTIyMzJlZWFk
YTcyMmEwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
EygzZTUwYWJhMmI0MzliNGQ2MDBkOTY0OWFkYTI1MzdiZjllNmJhN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTqOFzUE/dQ+900v2PXlVf7KmsB+
YgIin+AaqmtqVvbHP4nSvLknDFxblRtIoo48VPWdv4p24+cWhpX0nsNkDBWkToOx
jfcf5UOiCXk0wPdg+N4+YGOk6EO+iC/01dTI2xqBuOxgDLz9BRMfmeE6kWmU5KQ1
32TQPuiesmaFEdOy0AB4Larm3a7sr2Ce9Pxts86rdx5Kd2DrGt7svGnpG2apVj7Y
UbTAhhTAbr4wEULdNRdJTq9nUuJAqyXqcNn5pOXadArAVkxek5R5b56/bWeD5r6y
PtQEZec1XcjOJS5QDJ+VE9B5lOO19iwxf71nSXJmJ8uSxCbf/0JQHVEkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5Qq6K0ObTWANlkmtolN7+ea6ekMB8GA1UdIwQY
MBaAFJKbepdO04OsOOj8JIeSIy7q2nIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83ODc1ZGUtOWFlMi00NzYwLTlmNTAt
ZDZhYzc3YjQ2NjY5LzEva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83ODc1ZGUtOWFlMi00NzYwLTlmNTAtZDZhYzc3YjQ2NjY5
LzEva3B0NmwwN1RnNnc0NlB3a2g1SWpMdXJhY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi0e0CbT
Oo4OhdBsq5YXfn9vSYk1Qultu/szarBky/WxevfTO5/Aa4Niv3FKLaNmMGVx4L7z
PMJ0JpDETQXy359tNvbO4GPaz0JF0kVnqqpA0sq6Fn9gmJaZm4P4XfQuDOhfxei5
ZqZdCssszZkHmiJQ4bDsRtmAN2AXEot1kshBKNg0GMh6YqoVNvNw+ugfanIwOCMB
YQI0wKB/Qoi149dUiH2sND9Na4Ncmq0x50iHFpsH9+vn7D/xBAVsdk6Y5ho5hgag
GqE/TqzwgBpFf6IvdvVBuQKcFA9kTMGWzPt0WG0gjmuJUvSnffVfE1tfNhlVySpx
NLDj6vWYHV2rdg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:34 2025 by rpki-client