Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: yIYMUMewfGG6n8MqTDt4hfqjpabaejZEmRvR71fjIdY=
Subject key identifier: DE:5D:9C:C9:0B:FD:BE:40:96:1E:EC:69:72:98:15:2E:DC:8F:C0:73
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 0199FAD81192A34D3974F2BCE89AC7E4B7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 3G+0WGdwtcHl6KCd/+k05cqqCfBZmS2aAbWLy8LQjRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:11:92:a3:4d:39:74:f2:bc:e8:9a:c7:e4:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=de5d9cc90bfdbe40961eec697298152edc8fc073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:3d:72:cf:a4:7a:69:53:8b:65:ec:3a:bb:
c4:c1:2f:87:d8:cb:31:00:b3:cc:64:01:0f:98:3b:
95:f7:01:e1:35:fe:bc:0e:ee:41:39:8a:0e:d8:f2:
f5:97:d6:25:86:db:f7:01:b2:56:64:2b:96:b9:68:
8e:65:7a:cd:5d:45:d5:9e:ae:e7:10:61:fd:cd:bb:
b4:99:a2:6d:19:68:c4:67:d6:e5:e3:fd:21:f5:56:
a5:a5:37:db:7e:f5:58:26:12:e5:d1:dc:40:65:2e:
c7:01:7c:b5:c3:83:fd:7e:06:2e:27:ad:da:f9:da:
18:21:1f:77:cb:54:d1:55:e7:43:29:3f:f0:51:c3:
29:ea:d1:b0:dc:58:f4:41:8a:f1:3b:a0:76:fb:80:
eb:12:ac:23:73:ae:c9:88:ec:69:8a:9e:00:69:27:
f7:8a:81:50:01:e6:5d:3e:81:a0:e5:63:f2:67:bf:
e1:cd:6f:0d:a8:98:51:89:b1:bb:98:f2:22:1d:8d:
f3:a5:85:dd:c4:f1:f5:94:9c:40:a4:45:da:5b:3f:
3b:dc:e6:6a:7d:3d:7f:6b:7b:37:71:4c:9b:4f:5f:
3e:3b:e9:89:b5:b2:62:2f:5c:ed:8e:51:bd:5d:ef:
b6:2f:a5:90:4e:4a:1d:42:0a:13:ab:d4:6e:78:6b:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:9C:C9:0B:FD:BE:40:96:1E:EC:69:72:98:15:2E:DC:8F:C0:73
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dd:18:6b:7d:48:be:17:cb:ee:d2:86:cd:fe:86:e9:4c:b2:
d0:15:83:a0:a9:bb:46:75:bf:76:f3:80:f2:db:1c:a5:52:a6:
89:96:b1:1a:e0:e1:5c:76:ec:5c:1d:93:60:af:a7:0f:72:94:
ff:1e:4f:42:e8:39:c4:a8:8a:2a:5c:ec:70:78:cf:5c:f0:6f:
63:96:5d:03:cb:48:c1:75:9a:5b:1b:7c:3e:be:d6:db:6a:01:
15:34:db:18:6b:4e:4e:ab:11:5a:45:86:6d:b2:9b:ca:d9:d3:
44:61:d9:f8:ff:07:d7:97:84:3c:49:93:3a:02:a0:20:a2:5b:
09:a7:2b:dc:3e:9e:e6:45:60:e8:f1:4f:5b:76:96:31:93:cc:
20:35:a6:cc:64:d0:1a:2b:c7:93:4f:88:f8:b6:af:d8:40:a4:
06:8f:92:71:73:ec:cb:09:12:e6:7f:9a:57:c3:c6:c6:88:dd:
2b:9d:b3:67:57:6e:47:6d:82:29:94:2a:c4:1c:99:96:96:9c:
88:ef:19:09:b0:ad:5c:ac:43:5e:5b:45:39:56:02:af:e5:35:
b6:2a:4b:ad:fb:13:45:88:38:73:b4:fd:ca:a4:fb:2f:14:55:
9a:4e:ad:50:07:78:30:21:66:72:f3:24:4a:c3:22:76:8d:d9:
ce:c5:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:42 2025 by rpki-client