Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: MY2aXrBomH/2OehuJWhcNj0mAgRcumtmSM0q7bVrz2k=
Subject key identifier: 23:78:A7:82:01:70:89:BB:BE:AC:12:E2:7B:90:52:A5:EF:8C:E4:01
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 019A730160916751D818814C6C059015A07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 0141
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: sJ8P1yW1GJEDJixPgyFRfxQNPWOebMe3To8HiEhQoG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:60:91:67:51:d8:18:81:4c:6c:05:90:15:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=2378a782017089bbbeac12e27b9052a5ef8ce401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:57:9c:58:6d:c4:42:99:8e:5a:b7:c1:76:
63:bd:48:af:35:a4:0d:ae:a2:60:27:3a:c8:db:a4:
59:46:f7:0a:9f:d7:cd:13:88:7f:24:9c:ca:85:f1:
e9:09:3c:e4:9b:3a:6e:15:d8:99:34:c8:98:df:b0:
32:12:c7:fe:27:fa:6c:e7:28:e9:b4:61:8c:03:5e:
8e:22:17:9e:52:3b:bb:13:43:90:ec:60:b0:55:19:
24:1f:35:f0:7e:3f:2c:a7:fa:5c:6f:81:21:ae:54:
ef:8a:54:28:35:6f:91:d7:23:85:1d:13:f9:57:a4:
c9:02:e0:66:cd:7c:20:fb:a7:8d:b4:31:b6:a9:bc:
55:ba:81:f8:8f:b0:d1:ff:55:1a:78:79:7d:7a:fa:
3e:ab:9b:8f:99:79:47:9f:1c:95:10:9e:cb:8e:12:
e1:02:3b:da:ab:3b:59:da:54:ff:25:05:49:25:e1:
0e:04:f5:24:b1:b7:f4:ec:86:9e:9f:3d:4b:4e:b1:
93:ca:78:a5:79:24:53:40:25:21:f7:2b:27:70:1a:
7f:87:f2:98:cf:b2:09:8e:a0:35:08:2c:ac:85:52:
07:b0:ba:3b:c3:49:aa:e9:24:d1:16:35:e3:aa:87:
4d:3a:2c:41:c7:ab:3f:5f:39:4f:9c:a4:a8:5e:a9:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:A7:82:01:70:89:BB:BE:AC:12:E2:7B:90:52:A5:EF:8C:E4:01
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:12:25:fb:85:db:9f:b6:4a:30:cd:60:e0:cf:02:5e:8b:
7e:80:6c:8b:47:87:f4:fb:e1:f4:fc:25:75:93:fd:5c:96:9a:
7d:c9:56:cc:96:24:79:1f:47:7f:23:5b:68:88:b9:7d:16:dc:
d9:29:ed:06:de:5a:8b:21:40:f6:e7:7b:46:fc:38:aa:2f:2d:
12:32:8b:a6:b7:20:a1:65:07:7b:d2:d3:3e:52:94:b3:4b:32:
89:85:a0:d1:5e:5d:32:b1:99:72:e9:ba:44:cd:51:f0:09:fa:
e7:4a:be:c0:5e:41:fc:84:5e:c9:da:a0:67:38:5e:c1:49:44:
c1:29:36:88:f6:ae:79:16:9b:45:a5:5d:60:67:68:76:18:8d:
ec:51:48:89:86:8a:cf:e9:0a:cd:b3:73:ad:a4:12:8a:32:5d:
ad:2d:56:d4:9e:d2:f1:07:68:c5:b9:93:6d:97:7f:70:a1:11:
af:49:2f:5b:66:fb:2d:94:f3:b7:f3:e3:6f:1d:be:20:33:ff:
00:8b:ff:24:0d:1e:34:e8:01:6f:b9:48:8a:89:8e:21:f7:85:
26:9a:f9:9a:1f:4b:7a:4a:15:c8:22:5c:cd:ea:33:94:28:1e:
fd:ec:a3:af:d4:3f:6b:34:b6:f3:00:48:41:35:ca:84:5c:6c:
ac:86:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:32 2025 by rpki-client