Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File: kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier: YKXlsiprVuPBsZEiMgu93HkLPM3NVvXL+CXHeN5WZpA=
Subject key identifier: 2D:CF:44:CD:C3:0E:90:65:41:FE:B4:40:BB:8A:B5:13:6C:9C:17:CD
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer: /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial: 0199FDD8C6AE733DDF8B8FF49D70690E4B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number: 12EF
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: nP+isuG7Tk+myqwSYEnGS+gFvq8hvFuY02Q+qn+kCEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c6:ae:73:3d:df:8b:8f:f4:9d:70:69:0e:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=2dcf44cdc30e906541feb440bb8ab5136c9c17cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:04:35:c2:37:1f:e9:90:c8:2c:42:4a:44:
52:ac:60:96:db:2f:41:1e:c6:9c:f2:69:08:33:b2:
c9:95:0c:d0:2c:a3:3d:db:33:86:b7:a8:12:f0:c3:
ff:ac:bb:69:ab:3c:a0:eb:4c:8c:74:f4:0a:cb:47:
de:fa:8d:79:88:f3:a2:d6:5e:d9:02:08:92:4a:6c:
43:a1:e9:bb:c5:f7:9c:1a:c4:f1:75:ab:0c:45:b7:
b3:3e:19:65:86:fa:a1:f7:6f:bd:a3:f4:23:18:d1:
ef:ef:36:97:f8:1b:6a:3f:83:1d:6b:27:41:7e:e8:
46:ab:9d:2f:a9:27:9a:c0:a1:2a:f6:87:a9:dd:4a:
2d:aa:fe:7d:51:88:c4:57:14:28:eb:c9:b5:9e:c6:
60:65:1e:e1:a5:74:8e:cf:74:54:6c:5c:74:6c:7a:
3e:30:e6:79:3b:e2:9c:d5:b2:57:d7:11:d5:ac:8b:
33:8b:fd:7a:25:6c:86:fb:f4:b3:9d:eb:a5:43:4b:
f7:38:b9:49:52:ee:6e:69:bc:07:aa:16:e1:6f:77:
34:1e:4f:01:26:57:35:bf:3d:85:91:6d:60:e8:fa:
06:ca:e8:d5:33:c7:50:6e:b3:e2:cc:af:35:3e:48:
a5:f0:54:83:99:d2:53:44:89:d0:6c:f1:1e:7d:31:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:44:CD:C3:0E:90:65:41:FE:B4:40:BB:8A:B5:13:6C:9C:17:CD
X509v3 Authority Key Identifier:
keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d8:ac:54:b4:33:ba:8c:d8:d0:10:fa:c0:6f:bd:ad:8b:84:
59:13:be:32:b7:75:da:c4:ed:49:a7:a2:6c:3d:8b:6b:ef:51:
14:cb:9d:73:ce:b0:dd:35:e8:b4:3e:0b:6e:46:18:f5:a1:32:
18:d1:21:71:66:35:31:0e:0e:b4:fd:f7:3e:1b:71:b5:7e:17:
37:5a:bb:6b:b3:0e:52:d0:f5:7a:12:cd:d0:b2:ec:a6:82:61:
b1:25:c0:e7:fd:d5:dc:73:f9:0e:65:d6:55:8a:70:b7:d4:7a:
29:20:bb:59:7d:97:90:d1:58:2f:d7:60:95:95:1f:e8:17:2e:
e8:2b:c2:68:7e:e7:87:3c:35:da:1e:99:e5:35:f2:45:ab:ed:
ec:7d:0a:1d:16:a2:65:62:15:82:f9:c7:16:29:b3:d5:22:11:
a0:22:3b:7b:e7:0e:08:76:95:7b:8f:03:9a:84:01:ec:c3:06:
ae:4d:61:d6:bf:65:ac:f3:06:83:33:e2:17:ef:52:fb:de:0d:
98:b4:38:30:52:73:64:71:75:14:39:d2:44:0b:e2:8f:9d:27:
8c:c9:ef:41:16:52:6e:7e:44:10:6e:87:7f:1e:29:45:6d:f4:
46:f1:6e:0e:67:ef:c7:1b:af:5c:16:3f:00:b5:11:bb:14:ac:
65:1a:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:05 2025 by rpki-client