Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
File: kZ7Nu3kI36w6rapeSRbyhchQzLc.mft (raw, json)
Hash identifier: WGob6qGedsWw4eoCVTthpDbt38b8Lfmp2pmdIIJ4oC4=
Subject key identifier: 91:39:03:4F:A9:C7:A9:0E:EE:BD:62:0F:60:2A:B4:EE:B0:47:73:11
Authority key identifier: 91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
Certificate issuer: /CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Certificate serial: 019A725C46DFEB9858A25981C0E49869D6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
Manifest number: 90
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: kZ7Nu3kI36w6rapeSRbyhchQzLc.crl (hash: h/zJKFM5MEe2KnZw+biyAl7OFvfOFNfkacSQoa0usQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:46:df:eb:98:58:a2:59:81:c0:e4:98:69:d6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=9139034fa9c7a90eeebd620f602ab4eeb0477311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:03:c2:f4:19:fa:99:a4:17:d5:b7:24:62:
7a:61:80:13:ec:aa:bf:ce:c4:2f:30:df:09:d7:ea:
05:a7:a6:f1:2b:14:cc:33:79:49:0a:dc:a4:54:99:
59:0f:3b:ba:52:b8:e1:63:ed:c0:bb:13:e5:af:a4:
f5:c2:0b:2d:df:f6:67:a5:68:41:c2:6b:9d:49:88:
fe:f2:31:97:f4:35:15:0c:64:6c:4b:c7:53:78:b2:
69:0c:74:b1:2b:6b:50:63:b8:f5:00:55:5f:28:88:
72:ec:a2:04:4b:b8:cb:06:b9:91:8b:3f:7a:7e:2e:
cc:15:79:64:d0:c6:54:22:dc:72:74:59:3f:af:09:
cf:e7:fe:d8:5f:7b:8e:60:28:99:79:be:e7:83:5d:
fa:31:91:c3:53:f7:7f:44:99:95:5e:09:0f:9b:f8:
fc:4b:25:44:bf:3d:ea:5c:fb:c3:f6:dc:96:22:67:
5f:1d:e4:0c:44:e5:2e:f7:c7:fd:7f:4e:79:50:88:
2f:c7:b2:91:4a:2a:8b:55:35:59:bd:5c:c6:6f:a7:
33:9e:b7:cf:05:a3:eb:ac:ed:16:9c:5e:71:9e:e9:
46:1e:e5:42:d3:87:86:e2:93:71:b0:46:5f:79:ae:
53:62:68:02:a5:c8:b4:b0:f9:77:af:52:31:0a:1e:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:03:4F:A9:C7:A9:0E:EE:BD:62:0F:60:2A:B4:EE:B0:47:73:11
X509v3 Authority Key Identifier:
keyid:91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ca:2e:f6:81:9f:b7:f0:8c:00:65:1e:2c:70:0b:14:6a:88:
a3:f6:de:f9:08:0d:85:66:92:30:2d:0f:11:02:99:6a:97:1d:
a5:6e:de:8b:43:06:8b:53:77:77:a9:f1:51:1a:3d:11:70:a6:
97:85:a1:b7:87:a3:0d:de:f6:95:b7:ef:ca:75:b0:05:01:06:
bf:52:53:8a:99:a8:ec:96:16:4c:6a:1b:2b:92:3b:c8:9a:da:
f0:02:de:1e:d8:41:3a:62:2a:af:df:0a:e2:c9:9b:4b:af:ae:
4c:79:8f:63:59:5f:2b:e6:6d:ee:08:9d:4e:4a:a1:ff:97:92:
93:ee:19:33:80:06:56:ac:2b:65:02:3b:af:36:9a:6a:ba:b5:
68:d5:73:ed:3f:fd:37:49:fc:e8:0c:fb:67:24:23:a5:90:4c:
54:6d:43:2e:12:f1:02:81:f4:a7:82:14:3a:2f:7e:51:ec:b0:
a5:7e:3e:ef:76:14:65:7e:86:d2:68:9b:c5:7a:f2:20:af:7c:
c3:62:20:79:a3:ee:6d:95:79:5d:fb:94:e3:62:df:80:4b:c7:
fd:e2:5b:17:5f:12:82:a0:7e:1c:a5:03:72:42:79:15:e4:a3:
8e:d7:53:d6:0e:0a:a0:b5:83:8c:a3:c3:be:e3:88:d6:41:75:
b9:93:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:09 2025 by rpki-client