Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: nEtd6nCI25HuL1w3O2vlU4V2oyFgwYgIyNeBa6HJcuI=
Subject key identifier: 8A:C0:FC:3F:E8:83:5E:FA:63:C9:E7:CA:1D:C9:ED:C8:54:1C:F4:61
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019A72261B517E0652F5F7A034830A2B673A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: WoNXEMp+yd+Mkhn4/1ZhqBertzya3tvQSjmVb0eFkiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1b:51:7e:06:52:f5:f7:a0:34:83:0a:2b:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=8ac0fc3fe8835efa63c9e7ca1dc9edc8541cf461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:40:ed:89:68:86:9b:e8:c7:05:d7:2b:fe:
c6:8e:bf:4e:9d:af:9b:18:f8:bb:47:eb:04:ec:a5:
ad:f6:fc:3f:fa:54:a8:ed:9a:be:e8:f6:06:77:a0:
64:8d:36:ac:fb:1c:31:a5:6e:50:b5:ac:52:b7:94:
21:8f:1c:13:a6:36:64:af:27:15:ee:53:e4:b4:f3:
6a:c4:96:54:c5:e9:3b:8b:65:8b:40:f8:d9:d0:4d:
e8:b4:61:16:b5:b4:f1:44:db:99:98:a6:63:97:0e:
7d:38:15:ae:2c:36:de:98:ab:20:4d:99:39:7d:97:
66:c4:9c:b6:9a:ec:91:6c:36:49:42:cc:85:42:a9:
bb:44:e5:f8:46:70:7b:d2:e8:0a:fe:05:47:33:33:
94:4d:4d:48:a6:ad:c9:85:04:19:18:95:72:dd:3f:
59:8d:cf:c0:de:74:e9:a0:54:b5:5f:93:dc:90:eb:
53:14:c5:73:bb:1b:d3:51:d1:31:db:4e:0e:c9:7f:
4d:5a:f4:6c:e0:3d:76:3a:b6:d1:36:e2:87:c1:c9:
33:28:e8:58:df:a0:c9:d1:8a:e1:0a:95:0a:96:6e:
04:b0:90:28:b5:76:06:2e:7c:f9:0e:b6:6e:c5:e0:
89:3d:eb:73:54:f5:e7:db:82:62:a7:de:0a:5c:42:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:FC:3F:E8:83:5E:FA:63:C9:E7:CA:1D:C9:ED:C8:54:1C:F4:61
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d2:cb:56:85:22:b6:73:67:fd:4e:8a:bc:ba:a0:81:16:3a:
9b:cd:44:67:5e:03:a5:8f:0e:5c:b8:88:da:e2:f0:77:b8:e8:
b2:42:74:08:bb:03:e6:90:30:9e:cc:c8:fa:c0:c1:dc:9e:90:
f9:0a:dd:66:8e:1e:6d:02:08:89:89:74:83:f7:2d:95:2c:c1:
5f:ce:cb:01:13:b8:b2:6d:1f:b5:b1:46:fc:32:e5:5c:7c:23:
e9:53:3a:3a:67:2d:63:70:c3:02:07:8f:bf:bd:2d:76:7d:28:
10:73:3a:e0:d5:fb:fb:0f:1d:c2:c0:74:07:d9:0b:0c:aa:fd:
22:c7:60:14:ba:36:54:f3:4b:5a:6e:d8:70:74:02:35:8d:dc:
e0:d6:7d:4d:21:f9:b6:dd:6c:20:eb:d2:6e:d0:7a:b1:da:d8:
b1:ae:a6:7c:f3:e7:7b:d4:6c:aa:bc:80:29:95:28:72:ba:45:
41:ae:d0:96:5d:82:0d:19:76:bd:43:94:09:96:26:9c:ba:09:
fa:e9:f5:8b:2f:61:37:67:96:db:61:c0:5b:71:10:7a:d9:f9:
50:79:72:de:83:f8:b5:5c:5e:e6:f5:eb:a7:8d:bb:43:ae:6c:
3f:73:7c:b4:3c:4a:86:66:f2:ad:8d:0b:77:38:82:9c:69:36:
8c:17:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:09 2025 by rpki-client