Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: v6CeVhs6n9Xk4O2eJatfSKREfsEJCzSKcZDp+m+eSfw=
Subject key identifier: 03:20:58:2D:59:F0:D0:3C:C8:AF:32:EB:C0:57:CF:F8:93:54:D6:65
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 019A72266447AB1DB82F5B4BB32774B4BB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: CBiZ4Pko/5G3hGMd35deY6idd9yN2DhKW/nigK/cax4=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:47:ab:1d:b8:2f:5b:4b:b3:27:74:b4:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=0320582d59f0d03cc8af32ebc057cff89354d665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:bf:c2:29:55:02:c2:8a:7b:08:cd:57:25:
e3:3a:60:55:c0:8d:1f:13:2f:e3:56:75:c7:5b:1b:
2b:d8:6d:d2:c6:87:5a:8b:28:53:c8:ff:69:3e:aa:
92:3b:b5:e8:cb:be:d2:0a:59:60:c2:34:54:d7:07:
a6:1b:ff:46:6a:32:0e:b0:e6:be:2c:02:e7:d7:17:
ba:62:8a:45:f2:9c:8e:da:87:41:42:48:07:48:54:
8b:aa:4b:ee:6a:00:8b:b1:3e:43:86:8e:c5:6e:ec:
83:f2:15:8d:36:8d:0e:52:46:d9:47:25:4c:d3:59:
61:ef:83:92:24:2b:52:5a:7c:55:f2:0a:e4:8c:31:
f8:e5:04:72:fb:ef:43:41:d9:8e:93:65:9c:e0:a1:
b9:ab:6b:5d:6d:d5:83:30:3e:76:66:90:51:6c:ac:
e0:92:3a:3e:7b:55:ad:ba:71:f8:65:a9:47:08:6c:
f9:df:07:b6:e4:38:e8:d9:65:f0:36:85:9e:81:d0:
40:44:52:d3:bf:3d:3b:aa:f3:38:b1:39:61:42:8b:
7d:e3:7d:a5:91:9c:20:7a:a5:a7:d4:28:e3:91:08:
dd:be:55:1a:6f:79:c7:e5:b4:99:88:94:52:7a:94:
53:ff:ab:73:e8:99:f3:02:bb:6e:cb:7d:a3:5e:54:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:58:2D:59:F0:D0:3C:C8:AF:32:EB:C0:57:CF:F8:93:54:D6:65
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:9e:b4:63:90:da:29:20:3e:d5:d7:bf:b1:74:9b:c5:1c:
36:37:09:7a:59:e2:d9:5c:b7:51:86:5b:0d:0b:a0:2b:10:b3:
bc:b7:51:15:ad:81:b9:e6:45:e4:ec:fd:e1:69:05:08:c5:47:
8f:b4:a9:2a:35:ea:fd:0a:82:3b:a8:ae:aa:a4:f9:0a:93:20:
1a:8f:12:9a:61:e7:af:8c:ba:5f:ec:94:39:75:d2:3c:79:c6:
aa:80:d6:e3:df:59:56:4f:b8:20:2e:10:41:b2:ee:8d:14:da:
d1:eb:3c:00:52:8b:3f:57:3e:35:1c:7e:db:86:b6:9e:fc:05:
24:6a:7d:34:76:8a:01:d5:8d:e4:ef:02:72:e2:eb:39:bd:cd:
81:f1:40:e2:73:67:b7:55:41:a9:27:1a:6e:8d:ba:79:f8:67:
8f:6a:68:c5:0f:40:70:28:ff:1f:22:fa:bf:c7:f5:ee:9e:b1:
88:fe:fa:ea:92:f6:ab:41:3d:26:92:d4:16:56:c1:2d:46:ea:
28:b5:e2:ed:49:75:19:b6:03:c0:6c:28:1a:7d:45:65:0b:b0:
c3:0f:f5:07:3a:c8:bb:80:68:8b:e0:d8:48:e7:82:62:55:0f:
33:7c:32:55:31:b8:b5:6e:c7:c1:3e:c4:85:31:6b:96:b3:92:
8e:a8:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:18:59 2025 by rpki-client