Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: NSKKBhOn2QTj6u29KxbJIS/naEcEhQP/jgab3Rws50U=
Subject key identifier: FE:C4:7B:DD:36:5D:44:33:5D:8C:4F:92:E3:F2:05:8E:0D:69:80:7A
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 019A7113000661C60899081C37C65E8CCE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: fwPG4Z2svAInF4TLVAYO0AEvY0NDxncTZljaA0J5Cno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:00:06:61:c6:08:99:08:1c:37:c6:5e:8c:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=fec47bdd365d44335d8c4f92e3f2058e0d69807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:ce:2e:b3:23:d0:be:61:08:b2:39:a6:94:
bc:dc:26:1c:12:2c:2b:37:76:1d:53:40:5b:18:28:
08:2e:0a:cf:9c:4d:02:b7:f5:d4:d8:a6:12:f8:cf:
c1:78:19:48:af:1d:d2:ad:86:f9:15:98:43:df:c8:
8e:6d:c2:2c:7a:be:2a:3e:7f:40:d2:fc:29:d4:57:
11:4c:d4:dd:00:e3:c5:b4:ae:80:55:2a:36:b4:ea:
c6:73:45:0a:8c:e3:01:23:a9:70:02:13:35:86:cd:
88:d3:3a:3d:ae:4d:8b:b1:81:5a:4c:84:d8:59:a4:
d4:5e:1d:f4:29:e1:15:71:fd:a9:4f:0b:31:23:02:
14:f3:ff:2f:7b:0f:17:22:d3:78:5d:f2:12:d2:59:
f0:bd:f0:5c:32:36:76:aa:bb:67:31:10:9e:6b:62:
30:38:cf:1c:17:bb:3a:bc:78:4f:09:9e:b5:be:05:
37:8c:08:13:aa:67:27:0f:a9:01:50:22:f8:8e:bd:
92:67:5b:7d:3d:98:8d:7e:cf:5e:69:22:e1:97:5d:
49:ad:a6:16:19:ff:71:68:d1:55:c8:24:85:81:68:
77:62:57:b6:f1:30:09:03:de:21:8a:eb:f2:3b:fd:
48:1c:2a:05:b9:30:62:46:c3:0d:73:e0:df:44:59:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:7B:DD:36:5D:44:33:5D:8C:4F:92:E3:F2:05:8E:0D:69:80:7A
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b7:0f:50:49:f3:45:35:15:a0:36:c2:f3:e4:de:0e:70:5d:
6e:7a:e7:9f:ec:f5:1d:65:70:96:63:bd:59:bf:2a:e5:ad:21:
7f:f9:98:53:06:cf:70:d7:8d:ba:39:aa:6e:f2:52:f9:1d:11:
c3:75:89:b5:a6:ec:71:e1:3a:17:b2:54:76:7c:77:7e:17:11:
85:ce:0a:f5:06:cd:0e:ee:de:c4:38:f3:6e:be:16:77:a1:fc:
f2:3b:39:c7:72:ec:70:15:10:7d:70:df:ad:80:70:70:a0:4a:
cb:79:d2:5a:de:cb:95:8e:a7:b4:bc:47:9b:16:7f:54:87:fc:
9b:70:19:42:4c:8c:f7:2c:7e:c5:1b:43:95:c4:ec:ee:e8:91:
9b:f9:0b:b4:72:be:ee:cb:b0:34:e0:b0:c4:00:21:0f:97:16:
81:47:aa:f5:f9:15:90:f6:4e:df:89:7c:8c:e0:ff:65:48:e2:
7a:e5:b7:2c:1c:64:2b:70:07:65:57:cd:76:b9:6e:97:d4:b0:
13:78:49:cd:61:5e:53:61:79:04:c3:40:25:21:98:34:26:32:
9c:42:94:d3:f1:fd:18:09:58:99:8a:c2:3f:5f:12:4c:db:76:
5d:1f:c8:fa:eb:27:03:14:92:52:a4:ce:01:8c:65:7e:f0:bb:
38:77:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client