Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: NzAGCHQDWYu7sCjw0fwS7+OnFfGLcZ8hBdXX4YYa0bg=
Subject key identifier: 23:4D:C6:11:E8:1D:9B:8C:70:9D:43:F4:2C:D2:2E:53:F9:62:89:B4
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 019A21772504A7A773FFFD1AE7E7596D885C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 17:00:47 +0000
Manifest this update: Sun 26 Oct 2025 17:00:47 +0000
Manifest next update: Mon 27 Oct 2025 17:00:47 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: LbfMsaFM6L69tmJKPI6xJ0HYdi1NqxGwTEs1K2QU9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:25:04:a7:a7:73:ff:fd:1a:e7:e7:59:6d:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: Oct 26 17:00:47 2025 GMT
Not After : Oct 27 17:00:47 2025 GMT
Subject: CN=234dc611e81d9b8c709d43f42cd22e53f96289b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:4c:12:88:74:ac:b7:83:a1:94:ee:7c:e1:
46:2e:07:87:2c:9b:15:df:02:9a:1d:e1:2a:3c:cb:
b4:1c:72:61:d0:07:75:be:2b:da:27:eb:75:d9:fc:
65:c7:32:e2:95:ff:96:c6:11:fe:7c:77:c6:18:8d:
bd:36:0e:fd:39:a4:87:8c:22:92:90:1e:9c:62:3e:
ed:6c:85:b2:fd:9b:b4:b0:f6:f3:eb:57:da:8e:1e:
1a:b9:bf:9c:fb:11:cc:19:5c:cc:48:54:68:f2:d1:
a5:ad:27:f1:9a:6a:a7:5d:aa:c2:e8:a7:cf:50:09:
b0:64:d4:1b:44:c9:fd:a3:23:60:50:ce:06:de:e5:
e7:4b:76:4a:6c:8b:8c:b1:3b:c8:1b:1d:d1:8e:3e:
b5:93:f1:d8:3e:60:74:e7:a7:f3:04:0b:5a:3e:ca:
63:27:c7:ed:b1:64:ef:e0:0e:c1:47:94:73:41:c4:
12:be:a5:2b:18:bc:33:0f:9c:05:a0:bd:3f:7f:97:
17:88:d3:ec:19:b1:04:99:34:16:40:0d:e1:16:55:
42:60:2f:2d:dd:34:a3:42:46:37:f8:ec:cf:8c:7a:
64:8c:7c:52:d1:63:a0:cd:99:70:2a:be:3c:e5:54:
05:68:d0:7d:ae:d1:d0:66:a3:ce:60:2b:2f:be:58:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:C6:11:E8:1D:9B:8C:70:9D:43:F4:2C:D2:2E:53:F9:62:89:B4
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4c:bb:a9:25:5a:f7:a5:de:c3:da:51:c8:6f:c1:f8:1d:2e:
42:ff:b7:85:7b:3d:53:f3:3e:5e:e4:12:1a:2a:50:ad:77:48:
47:8a:5a:d2:ec:92:e7:b8:b9:d6:5c:44:7e:a2:81:ae:3a:5f:
e7:a6:d2:32:0b:43:2d:24:0b:53:c1:b4:91:60:70:64:02:a1:
29:16:72:b6:18:7a:62:de:a0:dd:d2:bc:14:f5:e1:47:82:80:
9f:d5:8e:fc:ea:d5:64:7d:8e:e8:37:c7:52:8b:df:74:a0:a5:
86:70:6a:aa:43:be:99:cc:b8:d1:5b:df:74:3c:17:7e:e3:f5:
4f:01:ea:c2:3a:c7:ab:87:17:f8:8d:12:45:65:2b:46:e9:1b:
b5:6f:66:40:b5:6c:80:c3:9c:c8:32:8d:36:26:32:4c:c9:30:
a7:33:02:5d:15:7c:cc:f0:d2:c3:6b:5f:4e:29:28:60:62:ef:
17:6d:2f:b2:6f:2f:33:22:bf:d4:ac:b3:3e:24:25:eb:f9:b7:
70:fb:2b:b5:65:e3:2d:9f:11:69:2f:c5:a4:22:f3:9d:58:30:
d8:30:5e:5f:b8:3f:40:d2:db:09:21:27:1d:35:06:92:6d:0b:
45:3a:14:ca:74:6d:d8:3a:0e:c8:12:46:3c:36:da:8b:dc:f8:
94:2e:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:31 2025 by rpki-client