Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: kElc2ayct3DhtZI616P5ZKJBz/HbPEkSuOkPYEhgsMw=
Subject key identifier: C6:93:80:78:87:E9:4B:BE:EF:02:D6:F6:BF:03:12:6A:B3:94:66:F9
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019A2478D9F73487EEB453C93E7DB805B780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 1117
Signing time: Mon 27 Oct 2025 07:01:31 +0000
Manifest this update: Mon 27 Oct 2025 07:01:31 +0000
Manifest next update: Tue 28 Oct 2025 07:01:31 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: z/k/o4XJu+z7ffdSuH6+eZl513tms4hX4reV++iJcyc=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:d9:f7:34:87:ee:b4:53:c9:3e:7d:b8:05:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Oct 27 07:01:31 2025 GMT
Not After : Oct 28 07:01:31 2025 GMT
Subject: CN=c693807887e94bbeef02d6f6bf03126ab39466f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:b2:9b:b0:6d:96:47:ee:8f:d5:a6:7d:f1:
0f:a6:06:09:67:90:ed:13:37:72:f9:91:8d:ec:11:
23:dc:7b:ff:6c:29:b0:21:25:1b:d9:2f:61:a6:42:
63:b6:72:97:6e:e8:1d:b3:4a:26:42:1c:38:bb:88:
db:70:83:c4:18:2a:9e:03:59:96:61:4c:86:91:5c:
8f:85:90:c9:ed:7e:84:a4:ab:61:7e:d6:47:e1:0a:
48:f5:c3:23:a4:38:2b:0c:57:ca:99:83:c8:fc:9a:
18:e7:fe:a2:9d:a2:f2:f2:a0:7b:ef:e8:7b:94:99:
fd:c9:55:82:56:0e:0b:0f:3c:7e:3a:c2:80:8f:f9:
7d:60:64:24:d9:93:16:85:db:d5:f0:05:31:d7:2a:
d2:53:e2:e5:05:58:be:28:85:8b:e6:0e:75:b4:7d:
37:97:a4:78:c0:ae:fa:42:fc:59:6b:73:c8:0a:9b:
02:fc:5a:ea:e4:77:0f:a7:3d:90:e8:8a:dd:55:d2:
e0:8c:53:65:db:e2:75:79:2b:01:43:bb:55:d6:66:
de:15:71:97:bb:08:6b:94:60:85:98:a7:12:5f:b4:
08:a9:24:8f:6f:ca:20:90:a7:3a:cf:d6:94:77:31:
7e:b5:34:fa:03:4a:8e:79:42:e1:6e:0b:45:70:7a:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:93:80:78:87:E9:4B:BE:EF:02:D6:F6:BF:03:12:6A:B3:94:66:F9
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:29:15:b5:02:9a:ac:5d:f3:94:4d:8d:d4:f5:91:fb:df:
d0:ed:a1:e7:d1:dd:3e:c1:d8:dd:a1:b2:9d:17:43:d0:f2:ae:
2a:21:ee:8b:4b:2a:f4:46:5d:fb:cd:45:4a:ea:4d:0a:ae:d0:
ca:96:44:dc:40:ea:92:56:a5:e9:2e:a3:72:d0:2a:66:eb:e0:
2a:38:d4:78:cf:a9:96:ef:03:c1:15:7f:cd:3c:4c:b1:58:95:
a7:7c:80:af:43:8c:82:c0:4a:ac:d0:a8:a8:5d:36:a9:5f:8f:
32:13:a8:36:91:6f:fb:bd:01:8b:ba:0c:40:57:79:b6:06:7e:
a7:95:05:fc:d4:85:3d:3f:fc:c2:82:a7:30:ad:01:47:75:21:
4a:c7:d8:2f:2b:09:66:8a:a5:a0:2e:8e:ea:f0:dd:1e:a0:69:
f6:ac:e5:22:63:a7:8a:2c:f7:82:63:db:01:5b:40:5d:c1:27:
19:85:d5:19:4a:e9:57:15:05:58:d7:96:37:0a:80:8f:65:75:
1d:ee:b8:42:68:0f:e4:d2:f6:cb:9a:5f:ba:ca:c3:80:72:c0:
5a:1c:04:d2:bd:07:3c:dd:2c:ac:f9:8f:59:31:a7:97:49:8c:
a6:5b:5c:68:2b:d6:7e:b1:1f:b3:3a:89:e5:22:e4:a4:49:f2:
73:14:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:55 2025 by rpki-client