Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: dy7AgdAYtqrwIdxsqsRNc2ez10b6ivr92NpiJAhyoz0=
Subject key identifier: 14:4C:BB:36:AC:2C:44:0E:8A:38:65:F0:B6:89:8F:D5:B7:57:5F:03
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 0199FC5841B9A3CDA6EA11D562EDE2D41E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 04D4
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: ORKocmGgO3k0zewnLxa/ZCeKbl6SPL5UZWR2JtGVjoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:41:b9:a3:cd:a6:ea:11:d5:62:ed:e2:d4:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=144cbb36ac2c440e8a3865f0b6898fd5b7575f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:9d:29:da:1d:a7:2d:fd:53:1e:ef:ad:2a:
26:57:4d:50:93:b8:1a:5b:39:56:95:7a:b9:a3:f6:
f5:a7:3c:6d:58:b3:fe:26:1f:51:bc:ea:29:f7:17:
a4:0c:92:65:df:d0:81:23:c3:74:b5:28:d8:e2:38:
ad:41:dc:76:f2:87:90:b3:05:65:bd:81:6e:81:fe:
e6:c8:d3:ec:76:93:03:d3:e9:9f:1a:67:36:92:0d:
b5:e3:4d:b6:7e:2e:d5:1b:53:b1:10:0e:81:03:d5:
5a:ad:15:24:3b:b2:65:89:39:02:bb:cc:63:75:eb:
d0:b9:a8:4d:a4:1f:e7:4a:56:d0:dc:25:80:be:cf:
4b:76:b6:ef:e8:dc:d4:8d:25:18:34:e5:86:7f:ff:
6c:c1:91:9b:cd:20:02:b4:c9:93:d3:3b:67:9d:09:
f5:80:04:55:b9:92:a1:9b:b6:40:52:fd:aa:0c:1d:
e3:6e:04:26:f3:f1:14:86:15:92:22:97:ca:65:42:
64:d2:1e:79:75:c6:b1:0f:91:2e:c7:64:f3:06:30:
8a:7a:bf:0f:7b:15:89:47:92:80:4b:be:8d:d5:f6:
5f:53:f2:cc:53:1c:42:76:5a:07:ec:43:85:fa:13:
48:61:c7:7d:ca:be:c0:14:3b:bd:3e:9c:22:02:06:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:BB:36:AC:2C:44:0E:8A:38:65:F0:B6:89:8F:D5:B7:57:5F:03
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:46:b5:0a:e5:78:5e:6f:71:7a:86:da:97:bd:c7:d8:45:fe:
10:76:7b:fa:e0:a6:87:e6:ac:ad:2c:1f:63:12:c5:9c:e0:70:
96:4c:14:7a:f2:5d:eb:a2:04:c9:7d:d6:04:d2:de:14:7d:79:
35:2f:a5:5d:47:3e:64:aa:3d:30:21:fd:37:d4:e2:65:7f:4c:
fa:c0:22:7f:61:be:37:c7:51:92:aa:2c:32:bf:c7:d1:44:14:
97:75:57:86:14:40:c0:d0:b2:17:25:2e:5a:41:90:57:36:29:
9d:dd:30:1b:fe:b9:46:7d:35:28:f4:fb:7c:af:5d:e8:86:80:
94:f3:bf:fe:9f:17:58:ea:7c:2b:05:8f:99:a6:30:fb:9b:e0:
9d:dd:8a:bc:cc:65:02:db:c3:03:f8:c3:99:e9:5d:97:03:87:
c2:d0:af:97:13:15:83:33:24:99:e2:a8:58:8e:46:80:2c:11:
38:51:0b:5a:6c:d4:62:a8:2f:29:e8:a6:9d:69:5e:16:3b:8d:
88:0a:ab:d6:a2:32:8d:33:d6:8d:59:a4:2e:58:5a:6f:b7:17:
9c:a0:48:20:4f:ee:66:84:1f:9f:f6:c1:bd:d1:8b:11:22:47:
a1:fa:a5:50:fe:6e:96:17:7b:d4:92:73:6c:5a:59:d4:ca:91:
f4:2f:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:03 2025 by rpki-client