Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: D3YdCX083fAMNer5BSFELbcdQT54qTRva/wvEFoJ2z8=
Subject key identifier: 0A:0A:78:0A:5B:51:B4:E4:FD:CD:87:5F:8A:F0:65:B5:8A:B3:F6:F9
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 019A71EE822D0754819DE43423AD0DB21079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 049F
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: LJILSDCkamEAf5niMHZoTdY9uzpEEoY0iE4M3loisOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:82:2d:07:54:81:9d:e4:34:23:ad:0d:b2:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=0a0a780a5b51b4e4fdcd875f8af065b58ab3f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:83:a7:01:aa:5d:69:8d:1b:2c:d3:a6:a0:
1b:dc:b1:89:e7:75:d6:05:91:ea:ff:70:55:d7:e6:
66:bc:c3:2f:3a:6d:ea:21:b4:ff:97:ed:a1:c7:ff:
74:57:f6:bc:29:54:d7:95:ec:d5:69:17:45:8f:70:
d6:98:cd:43:3a:5e:a1:13:c9:4c:9b:8a:52:80:8a:
cb:24:b7:bc:10:a3:1b:d6:a7:9e:37:bf:5a:d8:25:
c0:ec:a4:66:85:2b:30:46:91:42:a0:8b:19:e2:5d:
60:5d:72:46:2a:3b:d6:02:7d:e4:d1:b3:d3:b9:b7:
52:39:3a:18:f7:2d:42:39:ac:38:5b:0a:aa:36:b7:
13:79:30:78:b4:e9:3c:65:94:d7:7d:4c:ba:90:63:
35:f1:1b:57:b5:97:c1:9d:0e:7f:dc:ea:ee:9c:8b:
6b:26:4f:77:95:bd:18:aa:f8:ad:42:56:78:91:33:
a1:07:ad:e4:c7:74:f7:44:b2:ed:ef:b5:9f:6f:31:
34:48:60:14:a0:87:63:2f:33:0b:e1:11:2f:3d:d0:
8f:e1:32:31:7b:dd:dc:c8:96:1e:01:0e:f1:01:4d:
80:88:29:c5:6b:26:78:19:54:48:98:1d:06:37:36:
3c:9a:6d:6f:b9:32:dc:de:32:83:9a:62:c8:23:f8:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:78:0A:5B:51:B4:E4:FD:CD:87:5F:8A:F0:65:B5:8A:B3:F6:F9
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:eb:86:be:c3:f2:aa:4b:d8:10:b5:f4:83:e9:23:98:47:
8d:67:ca:e9:fd:4e:b8:8d:5a:aa:c0:f1:67:b3:9d:48:1d:bb:
18:f2:5d:c3:bf:34:92:b2:45:a7:71:02:63:bc:cc:ee:45:0b:
30:b1:d4:e5:29:b8:85:a7:e4:65:59:ac:bb:4a:21:f7:28:ce:
73:2f:63:d4:20:78:2c:55:e6:e2:5e:7f:3f:21:26:63:e9:60:
e6:c6:2a:ea:ac:98:17:d0:3f:fe:64:85:c8:fe:86:ff:b2:7b:
ca:72:f3:7c:9d:e4:3c:20:69:d0:c7:cb:2d:10:7d:41:3a:00:
ca:b6:83:16:9b:ac:f4:66:25:f5:9c:b2:fd:48:61:77:cb:f1:
97:b1:2a:0d:de:e9:22:07:c2:1a:0d:86:0f:d4:69:0c:a5:01:
c2:57:47:8f:06:7c:e4:c7:f0:c6:01:76:70:7f:e4:56:a6:b0:
14:c2:ff:90:17:96:44:59:73:9b:ef:96:a8:9f:d7:66:66:20:
7d:f8:87:a2:96:c8:5d:52:35:c1:62:ba:fd:19:f7:81:08:a3:
ac:d7:1b:9b:8a:13:c4:bd:60:8f:27:50:98:a5:6e:91:d8:08:
df:b3:c8:0b:d6:18:3e:af:4a:ed:1c:95:67:c7:a6:34:5e:87:
e2:4f:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:22 2025 by rpki-client