Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: +Vig/vh2RV/IErvJEUqnOgJcQZgYCOmam+/+2faVkW4=
Subject key identifier: 8B:E3:23:08:F0:55:07:CC:D4:D0:C7:89:01:50:DF:54:15:8C:E1:0D
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 0199FBEAC00F88C5924C487573209019F825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 144A
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: ExwEbuNekVl5MquzeFD9CF9aSbxZY7S4ihCFAz796S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c0:0f:88:c5:92:4c:48:75:73:20:90:19:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=8be32308f05507ccd4d0c7890150df54158ce10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:80:e6:7c:1c:3c:11:57:45:e8:fb:58:62:
3b:80:e5:52:35:6d:77:f7:50:31:37:7c:37:55:c6:
ee:87:75:19:85:16:eb:a8:21:01:4d:ff:ac:ad:e6:
ca:27:b7:02:06:95:80:98:88:2a:7f:4f:bb:fe:3c:
34:37:ac:1c:a3:f6:39:89:50:b2:76:ba:49:7e:59:
b9:56:c5:b0:e4:f9:1c:95:2e:4c:0c:cb:16:3d:3c:
e4:d3:4c:2b:d4:32:37:f7:f8:f1:5b:e1:e4:91:cb:
48:70:2c:56:69:c2:c3:99:61:e9:f8:0e:bb:58:d4:
39:ce:96:a3:52:b5:1c:b4:54:3b:06:77:31:0a:79:
31:da:b5:2b:df:97:43:44:01:cc:60:b6:78:53:03:
b5:67:81:6e:39:f0:27:ee:50:3d:04:48:b6:49:08:
8e:e2:c8:d2:39:75:58:c5:5a:bc:f2:2a:b3:93:e1:
ec:e8:a5:b5:e6:f0:64:fc:94:91:52:34:77:ba:5a:
c1:7b:4a:32:d8:81:d3:1f:29:74:f7:b5:c6:51:b0:
78:72:45:26:aa:64:68:c3:9f:9b:3a:72:87:6f:be:
62:48:be:0b:24:bb:40:37:62:b0:c9:26:63:a1:88:
3a:c7:ad:29:87:13:6f:a2:0e:b3:59:2d:dc:7d:cc:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:23:08:F0:55:07:CC:D4:D0:C7:89:01:50:DF:54:15:8C:E1:0D
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:4f:14:20:e6:60:6a:86:df:ef:46:08:d9:30:fd:83:c2:
a3:cd:30:b2:84:84:04:19:06:dd:b7:3c:a7:06:a9:df:ab:ce:
2c:28:35:33:c9:40:da:31:a9:9c:d6:c9:8a:2d:8d:83:be:6f:
23:ea:38:fb:64:1d:8a:38:66:a7:c7:8e:37:84:ac:b4:17:e0:
b2:fd:29:dd:b3:51:ac:41:0f:e2:2a:89:a7:e7:9d:6d:58:16:
c7:4d:bb:9a:31:cf:4c:09:d5:9d:a5:5c:49:9b:ac:83:9c:77:
3f:25:2c:a6:b2:a2:dd:9f:25:bd:e0:56:a8:3e:d7:53:e0:48:
e4:b1:fe:24:9d:b9:5d:90:66:b1:f6:67:2e:24:fc:39:9b:f4:
f2:9c:bf:51:da:7b:7c:18:62:01:dd:00:b1:58:46:df:69:b4:
f2:58:ac:7d:57:fc:f3:6c:5f:5f:69:f2:4e:d7:e3:43:51:1c:
ed:40:a7:7e:16:d7:54:4b:2c:54:bb:49:c7:e3:ad:43:00:45:
3c:b2:a3:15:71:3d:5b:ac:e5:ee:93:c8:58:2d:59:db:83:5e:
ca:54:28:92:12:19:1a:66:50:e8:fc:3b:ca:0e:92:01:08:70:
8c:66:c0:50:38:df:f0:b6:88:b9:e0:20:fe:9f:9d:d9:87:58:
ec:3b:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:00 2025 by rpki-client