Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: +yUcrQ/frVPJz/mKZBNAog0sEosDdvLm1LuQROLwvFM=
Subject key identifier: 74:D9:2B:4E:B4:66:AF:21:17:B4:CD:86:E6:A4:5B:BD:A9:BF:61:3E
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 019A71B89CC66F8D2102153709F17C3D0A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 070B
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: wZ7aGMWDtrdaU/66r5bI3DOxTs7dZoaOxDzg+4FA/Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9c:c6:6f:8d:21:02:15:37:09:f1:7c:3d:0a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=74d92b4eb466af2117b4cd86e6a45bbda9bf613e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:13:04:7c:36:ad:51:46:23:4d:58:1c:d1:
fb:89:37:92:06:c0:c3:0c:d4:84:59:fb:f0:1f:64:
d1:06:9c:bc:e6:df:05:f8:09:c5:7c:5c:7f:03:00:
0f:7d:39:f4:0e:5a:c1:c0:3d:b8:5c:62:75:1b:02:
88:8b:a6:18:1c:81:4a:33:31:07:c5:e3:40:c6:e2:
91:15:18:96:c1:be:70:ee:0f:45:38:0a:b7:00:35:
1f:f9:a1:9b:aa:8f:9b:da:10:e4:ac:84:d3:ab:8e:
44:68:59:f0:d9:47:35:ff:56:fb:d8:2a:19:c3:f7:
65:3e:87:84:0e:1b:14:cb:f6:1c:d3:be:2b:ff:07:
1b:c4:21:f4:5e:bc:70:69:17:6e:37:b5:5e:35:80:
3c:c3:b5:4f:03:7c:6d:15:cf:fa:b4:5b:cf:d5:a1:
aa:04:b6:27:32:51:e2:94:1b:73:d7:07:dd:9d:ca:
18:78:f4:3d:94:ed:64:a5:d3:77:7f:93:e1:3f:71:
0d:8c:d2:4b:e8:75:32:d1:28:24:9f:47:1b:c2:08:
ab:1a:b0:b9:61:82:fc:b6:c7:7f:86:e6:d5:39:4b:
b0:04:af:5a:25:da:ba:11:e0:32:4d:e0:c9:69:c9:
9d:31:d3:7e:c7:4e:f4:5e:65:14:68:3a:2e:49:5d:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:2B:4E:B4:66:AF:21:17:B4:CD:86:E6:A4:5B:BD:A9:BF:61:3E
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:d0:d4:48:13:b7:89:85:dc:4f:69:7f:cc:89:d1:8c:6d:
2e:16:4d:2d:90:1c:e2:83:21:ab:3e:6a:4e:e8:c4:f0:fc:fb:
cd:35:e5:87:93:f4:1f:a9:4a:fb:a9:23:c5:2f:37:58:0b:c2:
a3:be:fc:63:ac:22:ca:d0:b1:6c:41:8c:4a:79:1c:f7:83:ad:
fd:c2:20:40:8b:a9:22:93:11:e0:73:7f:7e:c0:a5:66:d9:3e:
1c:3c:23:d2:8c:89:33:72:d0:52:7a:56:0f:ba:3e:b4:cd:bf:
10:da:ac:4b:a7:44:f5:00:88:5f:c3:66:b6:50:e2:8d:49:20:
e2:f1:c7:39:44:b3:86:64:51:e8:14:44:31:55:d7:f0:d4:d5:
ca:bb:5a:26:54:55:7b:e8:64:a0:b9:85:62:25:45:9a:65:18:
fc:e0:a9:f9:d6:8b:9e:e9:26:75:93:99:38:6f:0a:75:77:d6:
15:b9:4f:aa:cc:eb:dd:79:99:c6:0b:a8:45:60:29:43:1b:77:
6e:81:34:5b:33:61:c0:82:45:00:29:c3:f6:65:52:17:6a:cf:
85:c0:ab:e5:6a:2b:3d:50:57:c3:71:08:e5:66:56:e3:62:f6:
ce:63:9e:65:8a:4a:85:26:cd:9f:c1:50:b5:6a:b6:95:a3:a9:
fc:91:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client