Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: nj8aOL3BH5u+Habd/HDTr98yPgGU2vJJ56sKBgbOOyQ=
Subject key identifier: AC:B2:1D:0A:98:AF:77:CA:9D:93:BA:0F:03:72:91:E0:F8:45:84:FB
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 019A7225F880EC16D41ED2D704B172F85B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 0A14
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: MvTlRr6wlbM9rrZ63fcVh33s183LTrHyPY38tHoPVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f8:80:ec:16:d4:1e:d2:d7:04:b1:72:f8:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=acb21d0a98af77ca9d93ba0f037291e0f84584fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:f1:9d:04:0b:0b:fd:57:d6:85:52:1a:9d:
59:18:1a:9a:80:36:64:05:98:84:d5:e1:13:48:7b:
7d:6b:03:43:dc:cb:f6:53:d2:bc:f0:ad:c3:5a:7e:
a3:f2:38:cd:1c:d4:25:d6:b7:ab:7f:30:7f:70:a7:
ae:89:e3:44:38:29:cb:6b:2a:b4:99:1d:73:e0:ce:
d1:f0:98:06:8c:b7:3a:f9:93:0b:a4:fd:85:d2:c0:
99:b8:1d:14:6e:0b:d3:f9:86:95:1f:18:f7:5a:e9:
cc:44:62:87:f2:15:5b:f7:f2:a8:85:ee:13:40:4e:
a9:10:a9:86:3f:c4:b7:16:da:74:7a:14:f2:35:43:
42:cb:5b:2a:7a:1a:1a:19:db:52:0d:8e:57:b5:2f:
7c:37:cf:cd:b5:fb:cc:e0:40:f5:11:3e:92:c2:36:
15:3f:f1:a9:5f:bb:42:0f:ed:e9:5a:9d:f1:ac:c2:
4d:5d:bc:7a:43:4f:4a:dd:54:5c:67:4e:94:0e:01:
39:e3:96:30:68:67:e7:7e:5b:06:33:6c:f6:25:72:
03:24:44:fe:dc:40:a9:b3:6b:9d:78:87:07:b8:dd:
f5:35:c2:91:5d:5e:38:f0:7c:3d:12:66:44:03:d8:
a5:4b:17:b0:4d:ee:66:eb:db:4b:06:ee:80:b6:d2:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:1D:0A:98:AF:77:CA:9D:93:BA:0F:03:72:91:E0:F8:45:84:FB
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:ee:e8:dc:e6:b9:f7:5d:2f:1d:07:ac:f0:13:c3:d7:32:
de:9b:31:a1:f1:2c:92:d6:1b:d6:c0:be:fb:b9:4b:0a:e6:54:
fb:d6:4b:9f:cf:7d:f6:fc:a4:36:15:b7:a5:a1:3e:cf:85:fa:
99:ec:d3:e4:e0:3e:ab:c6:35:d6:2e:3f:68:36:6d:97:af:cb:
26:63:60:c8:b0:d3:96:2b:40:88:cb:0a:52:51:83:91:12:41:
7b:98:0a:70:51:50:90:fd:3a:68:e8:35:19:c9:d0:2d:8d:d4:
61:49:e1:f9:b0:a4:69:fa:ee:64:07:1f:67:f8:d3:09:d8:69:
1b:fe:b1:6a:b7:4d:24:a4:8a:2b:64:6a:6b:67:6e:c3:d9:77:
19:e6:5a:03:1b:ae:48:89:24:10:25:7d:22:1f:81:1f:00:9e:
c4:e7:49:23:e9:45:03:72:a1:53:35:fd:51:1d:34:43:25:7b:
52:31:20:54:05:cd:9f:41:a1:c0:4b:ec:8a:40:67:ab:0f:b1:
d0:44:90:cc:3c:f7:89:7b:cc:0a:e9:88:b3:22:62:4a:fb:d5:
47:fd:6c:f3:5c:34:7c:4d:ac:25:fe:f3:08:c8:6a:a3:f7:3c:
70:0b:c6:d4:9f:5e:35:80:0d:6f:92:c2:da:1b:36:d4:08:9f:
73:bb:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:26 2025 by rpki-client