Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: huxe7sjmosprCUTBhzKs0qjxlPnv0wI8Eimro5922XM=
Subject key identifier: 73:06:C5:C2:88:9E:7A:A7:77:D4:65:E6:B7:3A:6E:CC:7D:C3:02:82
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 0199228C6836F05AE21BCAC5DA4D71A61022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: DLznL4D1GH5UOJhIsnNnCTUFU7ciDtcqGHKYCiZjhX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:68:36:f0:5a:e2:1b:ca:c5:da:4d:71:a6:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=7306c5c2889e7aa777d465e6b73a6ecc7dc30282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:b5:81:39:81:c6:d3:25:1c:df:d2:d3:99:
14:f5:05:a2:9f:c7:be:ff:a5:96:0d:14:b0:6c:2b:
d8:42:98:a4:a0:e4:cb:da:35:f6:f3:df:4d:3c:eb:
b0:7b:d3:56:bb:25:50:83:e9:ee:60:63:87:42:fe:
b1:e6:bb:65:3d:ab:b9:46:20:f8:9c:52:c7:2a:f2:
1c:26:9a:d7:b8:af:a3:ef:ae:1f:5d:99:08:0d:50:
1e:78:83:14:86:09:08:30:de:44:c4:4e:5c:e3:64:
c6:37:1f:45:82:81:e9:e6:7f:af:77:a0:b5:14:df:
91:c0:8c:e0:df:15:af:25:1b:96:ba:b5:81:37:36:
81:f0:d5:ad:bb:b6:b2:0c:47:f8:38:5b:05:19:08:
f0:73:7e:bb:4c:1d:54:94:bc:3a:13:d8:a3:86:01:
2c:95:a2:cd:92:96:70:36:1c:0f:4a:fc:7a:c6:ed:
51:fe:e7:0a:72:b2:89:25:5b:e7:c0:2d:cc:f1:ca:
8b:e2:96:c9:78:3e:85:4e:0c:5a:3f:2a:94:fa:ee:
6e:7d:4d:c7:dc:6b:bb:b4:cd:a9:c6:7f:d8:58:24:
15:c9:02:7e:d1:a0:80:64:a3:1c:5f:9f:ea:c7:94:
d6:29:ef:c0:e1:e0:8a:a2:73:11:6a:76:38:f9:71:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:C5:C2:88:9E:7A:A7:77:D4:65:E6:B7:3A:6E:CC:7D:C3:02:82
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:50:8d:15:41:bf:23:e6:1b:c4:5c:37:83:dc:0b:6c:88:
4c:e6:b4:dc:7c:70:cb:ee:da:ee:d2:5c:e5:ff:5d:32:d6:91:
1a:8f:f3:d5:f6:32:22:a9:52:e7:36:db:b8:c0:f9:7f:95:46:
ae:a2:dd:6f:92:93:53:77:39:a2:c6:93:ef:75:55:7e:cd:62:
0e:ed:53:36:89:68:3c:70:10:65:b3:99:b3:68:80:25:d2:3b:
1d:31:20:e0:b4:8d:a7:18:07:07:85:b5:35:c3:d2:bb:8d:aa:
ef:e5:03:b6:6d:11:d8:77:b3:5b:df:82:e5:bb:e7:90:b8:fd:
cc:9f:02:0f:82:ff:71:56:ba:42:37:5d:08:36:86:c8:8c:01:
51:76:65:d8:ee:0b:54:68:54:a5:3e:94:70:b0:ae:8f:09:e9:
9b:6f:3e:e6:6c:0c:a1:1c:0c:0b:e0:f4:d2:98:70:92:9c:9e:
b2:e4:e3:59:ca:58:39:65:61:af:85:db:a6:ed:5c:f4:29:bf:
4e:40:62:1d:00:07:ff:fe:dc:20:d1:7d:c3:8e:ea:b8:18:05:
91:c3:ed:0c:57:54:63:98:b6:0d:1f:65:b9:cd:2f:58:f4:4f:
65:38:21:c2:ec:56:db:cc:ac:fa:03:a0:5d:a2:50:3e:e0:5e:
13:fb:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:17 2025 by rpki-client