Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier: BIjNAWkGkOWqXWUC+aUVqwaJmegCZZA4oDm5bhwkbss=
Subject key identifier: 94:78:22:C4:7C:DB:DC:48:00:52:6B:13:D1:7D:31:C7:82:86:FD:D4
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial: 019A71B796E71DAFDD5BE913DFCABCB8CFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number: 08DF
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: kDkyFZqVfheFZeRfphriUwPS2BM29yvf/7LfzxJvWt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:96:e7:1d:af:dd:5b:e9:13:df:ca:bc:b8:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=947822c47cdbdc4800526b13d17d31c78286fdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:ba:22:23:1a:f6:d3:73:e8:2e:53:1a:51:
12:53:85:29:21:17:d6:f0:3b:11:e9:b2:65:52:c0:
d7:db:71:3d:76:4e:3b:57:df:8c:70:38:b9:33:4c:
34:f0:8e:c4:ef:c7:3f:e2:70:6a:e8:04:2f:ce:fd:
fc:eb:9a:3f:2e:f2:ba:e3:9a:45:5d:4d:ee:22:d1:
74:df:34:d7:57:c0:c8:3b:59:b9:ae:67:f6:41:c5:
d4:c0:3f:76:b9:0b:f0:6c:05:c4:15:3b:55:1a:0d:
69:57:36:84:2f:da:bd:e2:72:b0:7b:e0:53:e6:30:
1b:60:9a:ec:47:b4:a3:52:38:de:87:54:11:d8:08:
80:d9:dd:c9:b8:ea:31:1c:bc:7e:02:a3:5e:78:eb:
04:6a:2f:d0:68:29:e3:d3:6a:73:a1:54:5d:ca:07:
06:ac:b1:02:8d:28:e3:31:0d:bf:ce:c5:a1:e3:24:
66:f7:33:10:9e:b6:53:03:a6:b0:76:42:ad:ea:5b:
b7:d7:a6:e6:d4:7c:55:9b:91:96:7e:b6:8b:78:3a:
68:1d:86:45:8c:a9:af:64:a5:93:ec:8f:bb:d1:21:
81:19:4a:70:e1:71:ea:f1:87:a8:db:40:9d:aa:5d:
0f:e1:5e:ff:48:e5:02:d0:09:5a:5e:1e:64:4d:c9:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:78:22:C4:7C:DB:DC:48:00:52:6B:13:D1:7D:31:C7:82:86:FD:D4
X509v3 Authority Key Identifier:
keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fe:f7:ce:d0:e4:27:18:ea:e7:89:32:b9:ff:11:8f:06:99:
cd:d6:a6:34:fb:54:bd:46:d3:b0:97:81:01:ae:d3:9a:b7:a0:
5c:d9:57:2c:a6:7a:aa:68:22:ce:b5:d0:95:0a:d1:c4:52:e3:
0d:23:f7:3f:fb:a4:85:e1:90:56:b9:60:10:ea:04:6f:6e:5f:
f5:c9:17:48:62:6e:e6:89:8f:b1:cc:97:e2:ee:4b:ba:19:23:
bf:29:0b:b9:f5:0a:e1:66:2a:1b:4b:3a:51:58:1e:78:16:52:
2b:79:a3:2b:a5:f9:8d:00:ff:4e:7b:4e:98:93:32:80:02:36:
09:e5:8f:57:5b:32:9a:dd:31:32:fe:6a:91:13:75:00:fd:5d:
e8:d3:bf:b6:db:48:21:ac:cb:70:9e:13:9d:ac:34:9f:9b:54:
c7:96:d1:8b:47:9e:e0:08:3a:a4:32:e1:8d:f5:6b:d8:8f:c8:
67:a5:a1:d7:cd:ba:1c:b6:90:fe:28:81:a8:f3:d7:de:54:ae:
52:0f:d1:21:da:d4:64:73:f9:8b:78:de:e7:02:d4:ab:1f:0c:
9a:df:52:76:c7:ff:90:2a:16:b1:5c:1e:87:22:88:2b:6d:d3:
ee:39:6b:c7:d8:06:4b:d9:c0:02:e2:81:83:54:a7:16:4a:a7:
13:c7:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:41 2025 by rpki-client