Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
File: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft (raw, json)
Hash identifier: yLj8M/BDfe6k3XenExyBCi/gN7a3c4t1BxMwohzbrY8=
Subject key identifier: D2:F7:38:E5:21:E4:0B:34:61:21:D2:22:B5:4F:C2:9A:78:A5:53:1F
Authority key identifier: 90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
Certificate issuer: /CN=907d02304a8a0630afe6a985e4dc09007851f839
Certificate serial: 019A714A3522882BB08C10ACBB1E59889A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
Manifest number: 98
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl (hash: Ae10tBO7ueNHW7ZOznTIo2+d0lzOz/G9TttI+kiHtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:35:22:88:2b:b0:8c:10:ac:bb:1e:59:88:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907d02304a8a0630afe6a985e4dc09007851f839
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=d2f738e521e40b346121d222b54fc29a78a5531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:e3:2e:58:a6:9a:8d:70:0e:71:2d:c0:a0:
30:c8:f6:61:37:08:e3:88:ca:44:db:bd:a0:62:36:
76:ad:b2:5e:de:b9:ab:53:2f:06:63:0b:60:8e:49:
77:20:de:6d:81:93:df:d2:a4:b9:4e:21:29:f7:74:
13:24:b6:59:c9:84:0b:be:d0:3c:72:3c:ae:5c:04:
5b:80:a9:8d:90:0c:fb:aa:80:8c:d9:87:e6:95:a9:
d9:fa:27:75:f3:d2:b0:22:8a:3c:31:bf:6c:c5:b1:
ad:26:a9:48:3e:dc:ee:df:f2:0f:33:07:12:e8:8c:
87:31:f3:f8:80:52:63:f2:4a:6e:ba:52:d2:7f:74:
1a:60:0f:c5:cc:49:ee:1b:31:77:27:4c:e4:61:d6:
11:c0:6c:f2:a3:2e:4f:33:ff:b3:24:ac:86:d4:72:
b4:a7:90:86:45:28:bd:dd:3f:78:7e:3e:1f:38:82:
61:db:63:59:69:ab:b3:c2:9f:96:75:46:c3:30:7d:
10:b9:c4:9e:02:27:d2:23:7d:15:82:46:18:44:9d:
f0:a4:7a:12:6c:28:aa:7c:e9:fb:34:b6:5e:7c:6d:
0c:fc:c4:40:4c:b3:4a:cf:20:7f:4b:1f:f9:02:44:
a9:ab:83:3d:66:79:dd:1a:27:27:77:23:eb:97:1e:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:38:E5:21:E4:0B:34:61:21:D2:22:B5:4F:C2:9A:78:A5:53:1F
X509v3 Authority Key Identifier:
keyid:90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8c:ae:a8:89:9a:98:c6:33:e4:ee:3b:44:3f:62:11:ad:0f:
4c:bc:86:d7:62:d3:1b:be:d7:d2:cb:9a:59:0e:3a:ca:fa:41:
99:d6:da:5e:ad:37:91:51:83:9c:d5:6c:1e:04:f8:e6:61:16:
c0:89:de:c9:76:e9:11:7b:18:be:0d:d5:e4:06:36:61:ba:58:
59:eb:a4:e7:27:55:5d:84:0f:66:cd:c8:90:74:d7:8d:ea:4b:
f1:91:a0:e7:ed:94:55:c8:9a:7d:bd:fb:b1:f5:d2:c2:94:8f:
ae:38:d7:7b:8b:fc:1a:9d:d2:25:46:a2:db:66:ae:c3:89:c2:
40:32:40:f5:3e:a8:05:dc:bd:93:e2:bb:29:01:ab:16:4e:01:
7b:33:75:03:15:33:a1:e1:31:4e:6f:2c:c0:15:9d:fb:96:86:
96:8f:d6:f4:73:af:72:81:42:0a:e3:b9:78:32:de:0b:f1:c6:
d4:aa:5d:b8:ed:70:57:2c:10:a7:03:66:d9:52:df:36:c4:ba:
00:f9:61:12:dd:16:e9:bf:b6:ff:47:a7:a2:dd:86:f9:77:30:
6d:eb:1f:0e:d4:50:fe:cf:d1:dc:19:83:29:1f:3d:08:85:b4:
99:79:ab:3a:ae:8b:13:06:95:da:93:a6:f9:0a:ba:7c:5e:df:
f6:fc:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client