Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: 9Nw+H7G6iKEZAQnKfcZGcKNP3Q/Kv7yKZGf7JrZ6fco=
Subject key identifier: A9:A0:AA:BE:B3:16:EE:FA:C1:5E:5A:BD:F8:CB:5D:62:57:C1:52:3F
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 019A70A4D529724348355BD736504E6D1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: KfMJ4kbOuCjqKO9eLtx7QXkPilCUDOg3eZ3Uaifb3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d5:29:72:43:48:35:5b:d7:36:50:4e:6d:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=a9a0aabeb316eefac15e5abdf8cb5d6257c1523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:ef:de:b8:9b:db:ea:54:e9:99:da:cd:33:
35:01:49:04:1e:9b:cc:68:b8:23:6f:e1:8d:61:94:
a4:27:dd:de:e4:91:a6:e4:27:d9:44:bd:98:60:21:
67:e8:d7:6f:4d:4b:a5:aa:6e:58:ff:f4:20:f4:ed:
f5:db:d7:17:ac:28:43:66:19:47:32:b9:40:00:fd:
fc:88:fb:51:d4:ab:81:39:0b:98:c9:49:08:57:1f:
a5:75:ff:92:c8:b3:0e:6c:fb:6c:dd:2a:4c:7e:28:
52:0b:87:54:55:53:57:f8:4a:a5:71:00:31:9a:fb:
51:70:75:7d:49:66:4b:43:81:88:2b:f9:6d:35:e0:
32:6e:b1:2f:9c:92:58:9d:e8:8e:b7:9d:e4:2e:37:
9d:c4:90:b3:61:12:c2:81:57:da:14:83:72:b7:2d:
35:a7:34:1f:dc:4c:f8:2b:93:b8:72:2f:ab:61:13:
78:7c:55:dd:f5:87:2c:43:ee:e8:5d:b8:66:a1:f5:
97:88:ad:4e:c3:65:a6:00:10:66:50:92:85:c5:d9:
7e:20:27:d0:da:5b:d1:60:42:ca:ea:a8:77:cb:27:
81:cb:87:0b:b5:e1:55:a7:85:51:41:48:ac:a0:21:
71:9b:6c:5d:c3:79:cf:64:06:5a:6f:72:47:ff:c8:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:AA:BE:B3:16:EE:FA:C1:5E:5A:BD:F8:CB:5D:62:57:C1:52:3F
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:e0:7f:96:b7:b7:87:b9:64:0a:06:86:73:76:fd:db:92:
ad:9d:28:08:a7:d3:d3:61:2f:7b:c3:ea:4a:df:0a:09:a7:e0:
4c:85:0f:67:ea:b5:fa:36:c4:ff:b4:98:74:82:ae:23:88:a4:
98:11:7e:8f:ff:fd:72:a7:f3:b5:80:60:02:22:9d:be:3f:08:
7a:66:01:e1:ee:48:26:90:c5:a3:8a:6f:d3:8d:df:5b:b0:4f:
a8:45:3e:8b:78:27:31:8f:9a:4f:bf:86:31:d1:d9:6e:ea:0b:
58:2f:2f:6a:50:4c:10:4d:c3:81:eb:77:ae:68:af:e6:3e:f5:
40:74:0f:f3:af:09:fc:0e:5a:14:8c:72:1e:25:10:72:22:77:
c8:36:34:36:39:83:10:4a:7c:1c:c6:4d:ba:51:e6:6e:44:e6:
11:7f:58:07:55:64:fa:8a:3e:fb:5c:2d:f6:33:0b:ed:a1:3e:
17:c3:52:a1:b1:9b:17:66:33:59:c8:0b:cd:3d:09:27:fb:78:
76:0b:5b:4b:59:d9:77:66:5e:47:df:28:e5:f6:40:0e:81:f9:
94:a3:6b:f6:5b:b6:35:81:97:e8:f8:9a:f7:cb:40:1e:46:39:
15:75:c0:6a:63:d3:01:3e:92:02:f1:5e:37:66:79:69:59:06:
9d:1e:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client