Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: UmpeKdAJuOrvjcYROPHznFH/zXvmEAijaC/jncwbojI=
Subject key identifier: 25:E6:7C:6A:B3:E4:11:D1:A7:C8:CC:4B:3C:36:99:C4:5B:1F:32:82
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 0199FC2165333016DFD03F04161885E9EAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 03AE
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: CquIcX6262t+oa7/2pJYO+xCXBcxzCs8aXOR65b2byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:65:33:30:16:df:d0:3f:04:16:18:85:e9:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=25e67c6ab3e411d1a7c8cc4b3c3699c45b1f3282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:e8:f6:a0:f0:c7:01:83:6f:59:c5:e3:eb:
0e:43:e9:d1:05:ac:60:af:72:50:08:69:a0:25:4d:
b7:fe:33:6d:5e:ac:c5:84:75:76:21:4e:01:3b:11:
01:18:49:ac:4f:b9:5f:50:f2:b5:ed:3b:5e:37:35:
e3:77:bc:7f:d3:7a:43:4f:d1:3d:aa:18:83:41:48:
67:b6:67:91:7e:83:06:c7:1c:71:6e:8f:79:b1:2e:
04:a5:3c:d1:5c:d2:92:20:80:45:29:da:f6:e1:bb:
1f:9e:05:8d:4c:f3:30:45:5e:d2:aa:b2:30:96:22:
dd:de:0f:90:90:8b:fa:b7:60:7a:25:ed:d3:97:ad:
d4:1a:a5:d3:6a:71:d6:d2:fe:0d:84:94:5a:38:61:
d1:95:d8:60:ed:f5:e2:ee:88:6d:71:d1:48:07:18:
1d:30:94:b8:b8:24:d3:b9:d0:ee:cc:8e:40:40:8e:
94:59:31:b9:5f:00:7f:7d:ef:8d:36:00:1f:6c:a6:
fe:ed:bc:f5:b7:a1:f0:59:b6:cb:b1:c7:fb:0e:01:
bb:3e:df:37:ed:ba:2b:6a:af:4d:44:02:7f:7a:5f:
6f:8e:6f:7d:b3:bb:27:10:5b:a9:fb:84:ed:96:44:
68:a3:52:1b:d7:c1:23:af:c7:35:8b:bd:fc:24:77:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:7C:6A:B3:E4:11:D1:A7:C8:CC:4B:3C:36:99:C4:5B:1F:32:82
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:9c:84:1f:f2:28:53:0f:d4:14:32:0f:60:b0:d0:dd:44:
b2:61:c7:a1:da:de:ea:9c:7f:2e:d2:06:f4:4f:0f:65:65:eb:
76:19:77:47:9a:2f:5a:56:d1:70:01:6f:d5:79:20:08:ac:23:
1e:17:3d:ed:06:7f:cd:60:63:e2:75:31:8c:e7:5b:d4:85:65:
45:28:be:52:0c:ef:48:1e:18:c1:a2:c0:96:9b:0b:28:88:77:
58:4d:fd:60:5f:4b:79:ed:26:34:83:12:c4:e4:80:a9:bd:6f:
bb:bd:9c:21:c2:29:06:1c:b6:45:f8:cc:b0:be:d8:24:3e:2f:
b4:fe:22:6d:10:a0:b6:fc:e0:ab:7e:e8:43:cd:89:67:03:45:
1f:96:32:7d:3c:5a:f4:28:6d:6a:cc:ad:bd:b6:33:3e:f9:75:
28:05:ca:3d:49:2e:9b:98:8f:55:71:7f:4e:d2:de:f5:4e:7c:
91:50:39:00:5f:f0:fd:d8:14:85:a4:3e:f8:55:b9:91:e9:1a:
7b:76:74:d2:c8:d1:04:cb:d8:14:e1:45:65:4d:1d:a8:b5:84:
7e:ca:9d:9a:54:bc:13:fa:b9:7c:58:a7:e9:5e:21:cc:a8:13:
a5:d9:6b:6f:f6:a8:c9:d3:21:23:09:ee:f6:c3:b1:ba:5e:67:
90:97:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:14 2025 by rpki-client