Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: jdB3/CKaFKkE1XpbpivbIceN42WEz5nBolgI/lnzW1g=
Subject key identifier: 40:46:58:D4:DF:DC:2B:F8:9E:B3:14:D5:1B:FE:EB:9F:3F:7E:04:FB
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 019A71B7845EAE663D7B4BFB7E9234C796C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 0808
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: 0GXV2F06Flog1IfwApi4rkUHZoFPVpBiyTQi9anO1ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:84:5e:ae:66:3d:7b:4b:fb:7e:92:34:c7:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=404658d4dfdc2bf89eb314d51bfeeb9f3f7e04fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:a7:9b:00:41:82:13:78:9f:25:a5:dd:c1:
d0:f4:05:36:84:d3:80:6d:2a:89:f0:33:a9:45:71:
12:1a:b0:b5:20:91:0e:99:71:d1:73:be:a3:14:2b:
5e:e1:af:d0:c4:a3:82:e2:9e:71:8f:cc:11:a0:f3:
c8:ea:82:79:d6:ba:3a:56:c7:4f:d8:9d:ea:56:8b:
14:95:b1:6c:5b:da:1d:ab:0a:0c:0c:27:6a:84:c2:
f5:d0:fa:0d:04:6a:fa:29:a7:d3:91:fa:ee:ff:15:
32:29:fb:3a:a8:97:80:09:ea:2f:b7:0b:49:6b:75:
cd:e8:76:2a:76:f9:81:47:38:ea:a8:da:fc:b0:4e:
d2:c2:05:2e:02:65:b2:31:5b:ef:86:50:c4:8b:da:
cd:49:e4:e3:aa:8b:fa:44:79:97:ee:9d:84:2f:1c:
f9:f7:e3:31:c5:83:42:f2:80:de:a3:cf:99:32:0d:
7a:42:a3:d5:69:70:1f:86:7f:ea:bc:52:1a:7f:80:
25:b2:c5:53:ba:b2:3d:e6:a0:12:9b:c0:42:b4:32:
b5:27:86:f6:c4:4c:3f:b8:a4:53:4a:8d:a4:f5:61:
8e:e0:11:b6:9f:88:01:ae:02:5c:22:20:ae:80:5f:
00:9f:4f:44:91:3a:9d:3e:5a:51:15:0b:15:61:93:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:58:D4:DF:DC:2B:F8:9E:B3:14:D5:1B:FE:EB:9F:3F:7E:04:FB
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6b:91:46:cd:3a:b9:73:28:14:95:ce:c9:e7:5d:51:7d:09:
b3:89:05:65:d7:35:90:f5:9a:11:c5:e6:2f:9d:06:b4:00:df:
0a:c2:f9:21:99:95:b4:ad:3e:68:6d:17:17:8d:d4:10:71:45:
91:d9:a6:a1:60:8f:84:ac:eb:8d:ea:d7:b9:06:b5:d3:d4:98:
96:4f:d1:8c:34:e8:bf:7d:91:43:b5:5d:da:cc:4f:e0:60:8e:
2c:78:cb:d0:53:79:19:5e:73:38:d4:18:cc:9f:a2:bc:cc:0a:
a2:12:14:c1:f3:bb:74:88:c6:ce:0b:ae:b2:71:af:07:f5:d3:
67:19:b5:d5:a6:88:b2:72:3a:55:1b:b6:eb:9e:c8:79:ce:57:
32:4e:f7:9a:6f:1f:6e:88:13:9c:34:ec:f1:2b:71:86:12:91:
58:77:11:d0:ef:9c:15:41:e5:90:a8:6a:f5:64:d9:d5:bd:f7:
7f:85:49:5f:de:96:86:8f:a5:d7:1c:f3:ce:30:c1:56:24:6d:
04:de:60:71:07:f6:0c:0b:95:f9:59:a4:b0:27:8f:88:5c:4a:
d3:d3:76:32:fb:d8:e2:26:d6:28:53:65:14:11:d4:82:da:61:
13:95:52:aa:76:33:a4:d4:25:f6:53:69:09:74:ad:fa:45:f5:
19:55:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client