Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
File: kiGxuiPNnBINnmfHS16SkKcq3SA.mft (raw, json)
Hash identifier: caNYe03RC9KiFTIZcxcTDlOS3Kx0c65JtXCRpA+cWvE=
Subject key identifier: 7F:6C:8C:0E:0B:0A:69:E1:5E:AD:A7:5F:78:1C:6F:72:03:64:B3:9A
Authority key identifier: 92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20
Certificate issuer: /CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20
Certificate serial: 0199FCFD91BDA687E28BB48B390AD43FA7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
Manifest number: BD
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: kiGxuiPNnBINnmfHS16SkKcq3SA.crl (hash: Ii2RSVxjGryX0gR/RrbkXfGsWD7CNnsqdtke6SWkpJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:91:bd:a6:87:e2:8b:b4:8b:39:0a:d4:3f:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9221b1ba23cd9c120d9e67c74b5e9290a72add20
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=7f6c8c0e0b0a69e15eada75f781c6f720364b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:f5:3b:7b:e1:18:9e:df:27:7a:59:5d:7f:
18:8c:ee:56:3e:9d:cd:e5:06:10:ff:85:e8:ed:0f:
0a:69:da:06:12:a9:ef:98:40:4b:32:35:86:ff:55:
20:2d:4a:14:d6:43:18:ab:ab:be:17:a9:24:64:b4:
23:66:4c:73:74:24:fa:ef:14:b7:0f:0e:90:5c:cb:
c7:09:ac:6c:fc:87:36:73:89:06:dc:16:4a:53:b9:
3a:13:72:07:c9:46:71:a2:ca:d0:3e:09:1d:fb:ad:
e0:c4:69:ac:0b:e1:8d:fd:8a:1b:d6:ac:64:26:c7:
f7:54:ae:21:ab:e9:67:70:b9:69:96:b6:8f:22:43:
18:33:04:fa:4b:a4:a3:85:b4:2f:14:d9:f3:ab:4e:
19:8e:dc:45:6c:1c:77:68:3e:e8:37:45:aa:ce:21:
14:45:bb:f1:20:7c:c9:3d:59:df:ca:e0:7c:77:2f:
a4:1f:1e:8a:45:47:6c:2b:ad:71:15:da:0b:ae:a5:
63:ed:8b:ef:21:cc:4d:d1:b3:b3:87:47:37:f3:79:
76:9f:cb:55:c0:cb:ff:3a:cc:df:e4:67:d8:c5:d0:
f7:5b:5b:08:91:56:3a:9e:64:1a:c1:66:e4:4f:b2:
38:1a:f9:f2:5b:cf:27:a1:0e:23:91:8c:8c:82:0b:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:8C:0E:0B:0A:69:E1:5E:AD:A7:5F:78:1C:6F:72:03:64:B3:9A
X509v3 Authority Key Identifier:
keyid:92:21:B1:BA:23:CD:9C:12:0D:9E:67:C7:4B:5E:92:90:A7:2A:DD:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiGxuiPNnBINnmfHS16SkKcq3SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ced58-5b1d-42e3-8da6-3db7fe8f6783/1/kiGxuiPNnBINnmfHS16SkKcq3SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:f1:26:51:84:a3:19:cd:f3:3a:7c:c3:14:6d:e0:16:fa:
b3:82:35:aa:db:f9:ab:b8:75:3a:8a:1c:c9:ef:42:67:32:53:
c6:91:08:ae:43:52:cd:08:34:58:e5:a5:44:0e:74:ba:b6:11:
69:d1:71:3e:c3:b3:db:fd:fe:3c:86:67:af:e0:f3:ee:d3:27:
3c:e1:e1:b3:28:b2:ec:d3:a7:6e:4c:19:eb:08:9d:75:70:57:
da:0f:91:70:86:38:3c:27:1b:fb:92:f9:b3:c7:99:4e:2c:9f:
49:56:3c:76:01:2b:e9:2b:29:12:22:d0:48:51:c7:db:12:80:
cb:4e:e0:b1:4a:ce:f3:79:61:63:fe:d0:70:0c:81:50:70:19:
74:26:0b:cf:5b:40:68:c5:b5:b7:c1:aa:f3:9d:86:5b:20:9f:
e8:12:2a:98:01:85:af:b6:69:85:5d:65:50:19:df:d6:82:4d:
d6:56:be:1e:6c:0d:b2:28:54:35:2c:e0:37:e9:62:13:bd:2c:
64:15:3e:53:05:9b:71:0f:8f:22:d1:06:c7:0c:5b:ed:5d:45:
fd:49:1c:bb:62:3a:8b:90:be:8b:af:5f:a4:b9:46:f2:64:96:
76:a8:5e:6b:88:ad:2d:03:e4:08:41:42:a9:7c:60:d1:c0:f5:
5a:4f:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:23 2025 by rpki-client