Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: uVc22XIr1WoEdfWkIz/26X0GHHQ39was1IV+S5YtELM=
Subject key identifier: 0A:10:60:5A:56:E3:85:C3:D9:59:96:D8:B7:3B:A9:7B:7E:8B:C5:96
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 019A71B92CD55FCFC5F7356F67A04ABCC1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: QkjGUaf5vd+/mQyrGKPa1aGS1YkvBrntB0RJFbDTQSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2c:d5:5f:cf:c5:f7:35:6f:67:a0:4a:bc:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=0a10605a56e385c3d95996d8b73ba97b7e8bc596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:f5:66:6e:03:f9:e8:b5:b4:6c:83:f8:49:
0b:c0:b5:1f:23:47:99:4f:01:ce:3b:d7:69:37:f3:
fa:12:08:e9:95:8c:e0:43:06:cc:9d:64:88:87:1d:
c5:e5:6d:ab:f9:57:9e:ab:45:33:3b:8a:28:57:15:
e3:b3:b7:33:7c:5a:10:6c:6a:7e:b3:99:d3:3c:f8:
cf:3f:90:2d:fc:69:81:24:83:82:d0:c7:31:93:4f:
fd:7b:76:2e:e4:ff:cc:0d:ba:d6:df:3d:01:ed:9f:
fc:6c:0f:65:44:87:d5:57:1a:f7:2b:c1:c9:f9:90:
ff:3e:f8:6b:4d:2f:ff:91:42:0f:82:3d:e7:42:df:
cd:86:35:79:10:ee:93:e1:fd:a4:5f:18:bf:6c:a8:
b0:73:2d:b1:86:d1:14:c9:6b:cd:54:be:73:85:22:
ac:a4:0c:56:2e:79:4c:fe:17:6a:fc:dd:45:00:b6:
2d:86:65:88:49:04:cf:c3:81:88:cc:54:bf:85:c2:
a2:5d:e0:f6:f8:92:c0:d4:53:04:ba:aa:7d:03:6e:
64:82:bd:10:52:b7:21:54:fb:9e:89:e7:d2:b4:29:
a3:97:e7:f0:d8:83:16:fd:88:c9:8a:f0:e5:3b:02:
01:0b:af:8f:8b:ee:b0:de:d5:7f:f5:f5:f8:1f:87:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:60:5A:56:E3:85:C3:D9:59:96:D8:B7:3B:A9:7B:7E:8B:C5:96
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2d:94:5d:2a:2e:95:75:72:f4:c0:6e:51:81:0c:53:04:b4:
15:69:18:da:65:f3:71:6c:db:df:4d:36:6f:cd:37:9b:72:19:
72:df:18:bc:8c:f2:68:22:2d:a3:fd:d4:63:04:75:d5:7f:79:
bb:87:f3:01:80:3f:e7:8d:b7:ca:6f:62:e2:93:12:e5:90:3a:
85:c8:b9:5b:ac:57:f0:b8:44:c1:bb:14:84:64:ff:20:fc:c5:
1f:09:1b:9f:8b:80:de:2a:47:98:b9:18:f5:6b:56:3e:82:d5:
35:4f:7e:e6:2b:49:23:6a:6d:08:bb:ec:8d:4d:71:93:36:9c:
dc:c3:a4:c0:dc:95:be:5e:44:72:0c:b8:63:de:72:0d:ca:1b:
04:55:07:f5:82:0c:4c:80:ea:1e:86:19:0e:55:b5:c5:bb:63:
87:b6:0b:de:a8:69:23:18:2b:a0:fe:ab:52:52:91:4f:8a:c6:
a4:58:d3:62:2d:4d:68:cd:f1:dd:8f:da:49:66:82:2c:6e:8e:
86:1d:d0:ee:e2:7c:ad:31:c5:6b:a4:c5:8f:57:5e:ec:b3:b6:
92:c0:b3:35:76:df:89:f7:50:a4:f7:50:20:c4:90:35:91:22:
3b:dd:95:05:4b:8a:66:f2:77:53:f9:a7:b7:10:19:35:61:77:
7c:05:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client