Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: atke8qsapepY7J3kU307SX12YAqxLv6Nq2Ur+iwaU9I=
Subject key identifier: AF:D5:C6:BD:27:18:1A:99:D6:80:86:75:EB:73:28:ED:C0:34:30:BA
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 019A71B88989B51BA1B1ED63B3026EE36FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: LJuqE2OadQkOEmjbkWIEgTX2UXegagw84sjTf/0pTVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:89:b5:1b:a1:b1:ed:63:b3:02:6e:e3:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=afd5c6bd27181a99d6808675eb7328edc03430ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:31:fd:25:f8:e9:15:d3:72:d8:3e:47:67:
fc:50:9d:f1:26:eb:03:64:6a:78:1b:93:02:b5:27:
ff:4b:4e:81:5d:4b:df:58:dc:e3:10:b1:6b:9f:9c:
18:a9:79:26:dd:7e:e7:44:35:73:ab:a1:82:ff:36:
94:24:d3:fe:01:0b:04:e5:2d:ae:c1:12:dd:a9:9b:
49:d9:f7:63:d6:c1:5c:fa:b1:4c:85:eb:b5:75:6f:
e8:4a:df:5b:67:8e:96:00:1a:5e:53:8a:f0:a8:87:
bc:6f:03:7f:81:5b:c1:49:60:43:76:c1:eb:d0:25:
11:c8:67:1c:2a:a2:7e:48:c3:dc:7f:f0:08:6a:c1:
80:4e:14:3e:c6:8e:bf:62:bf:49:28:8e:cf:d6:84:
29:9c:e0:2b:ca:07:1b:be:43:c8:6c:d2:aa:9d:9a:
11:09:ca:7f:1d:b7:e2:a6:2e:d0:5a:77:81:43:0a:
b0:76:8a:8f:65:ec:1d:5f:47:a2:47:ef:02:fc:04:
19:a4:88:07:6c:15:50:e4:fd:d0:e7:14:4c:a3:1c:
9b:84:46:6b:51:a4:fa:93:c3:47:9f:00:4f:fe:85:
14:80:87:88:f7:b0:67:6f:0b:63:d7:d4:1a:02:06:
be:a4:9b:71:f6:b3:f0:0d:df:d3:93:a2:7e:87:01:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:C6:BD:27:18:1A:99:D6:80:86:75:EB:73:28:ED:C0:34:30:BA
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a2:75:01:ee:ed:a3:b8:c0:98:e0:8b:cd:92:7b:d8:e9:c7:
b8:1f:3a:21:2c:4b:e4:66:0a:3c:d0:65:d1:c3:dc:9c:7d:e8:
a7:dd:0c:fd:75:e5:70:de:3c:bf:1b:e2:07:84:2a:48:4d:38:
b1:63:ad:a8:1c:83:66:a1:b4:4b:79:84:c9:ea:cd:5f:2e:38:
c2:b0:dd:60:68:9f:bd:0c:1c:a1:e8:2e:e9:42:97:62:7c:ba:
dc:90:66:66:d6:3b:6a:e3:12:d9:56:f5:09:57:8e:b0:37:a0:
d3:39:85:62:88:44:bb:d7:2f:15:98:6f:79:e2:c6:23:d3:e3:
72:ba:19:48:67:9c:5f:cb:b2:02:b5:23:ac:45:6f:2c:ac:d7:
b6:f1:72:ad:9f:7c:28:84:9b:f6:2a:8b:fa:9f:3e:7d:c3:e7:
d6:61:bc:7c:90:21:84:28:ab:fb:7a:6d:68:a7:c9:3d:67:9c:
e3:6a:2c:58:27:1e:b9:7e:dc:67:b8:90:f9:88:11:c9:f0:ad:
35:77:69:b3:64:f2:8a:d0:a4:b5:b6:74:df:76:82:3a:79:3c:
b8:65:67:86:9a:be:8c:64:b6:c7:e1:ad:3d:36:43:b9:7b:8a:
c8:1d:b6:ac:c2:1c:3a:75:80:17:af:20:af:45:a7:c1:97:ed:
82:6a:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:46 2025 by rpki-client