Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: EJGbHyS5DopnVdz+Fh+1J/kra7qfIsrgcEY6+f7YfGQ=
Subject key identifier: 23:DB:9C:1B:3D:28:31:E4:A0:13:1E:A9:DE:AD:8B:8A:43:15:83:86
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 0199FE4718F8122A699A7E7CB1EAF30E8974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 070D
Signing time: Sun 19 Oct 2025 21:01:36 +0000
Manifest this update: Sun 19 Oct 2025 21:01:36 +0000
Manifest next update: Mon 20 Oct 2025 21:01:36 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: 4Lr8+/D0g3vXzmJuaxykHU5L3X05firj/potw74lS+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:18:f8:12:2a:69:9a:7e:7c:b1:ea:f3:0e:89:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Oct 19 21:01:36 2025 GMT
Not After : Oct 20 21:01:36 2025 GMT
Subject: CN=23db9c1b3d2831e4a0131ea9dead8b8a43158386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:9e:b8:34:34:09:08:a9:aa:9f:50:a8:05:
ac:0d:3f:71:ec:d4:92:9d:a6:5e:5b:9e:ee:f7:60:
1e:f7:94:4c:ec:4a:1d:ed:9e:c2:81:68:a9:c3:8c:
eb:8b:1d:44:54:03:08:53:4c:67:ce:93:4b:4e:46:
1c:12:91:bb:eb:5e:f1:d5:8e:50:85:aa:0c:01:70:
c7:72:7d:7f:75:6c:2f:66:ac:7d:3e:6b:52:ac:2e:
9e:5f:51:78:d8:86:dd:e8:95:07:d6:7f:e8:41:e7:
3b:4f:80:25:75:53:2d:0e:80:4b:99:ac:e9:23:22:
48:f5:b0:50:c7:8a:74:a9:88:42:7e:77:a8:cb:d3:
60:07:56:ea:74:fc:79:64:bb:28:60:67:16:b6:f4:
d0:16:0b:03:68:8a:df:f3:51:5b:3a:e6:f6:e5:06:
c6:56:b9:d2:52:a1:3e:82:ad:14:dc:12:d0:d2:4e:
22:10:f0:f3:35:a8:ae:2f:70:23:06:ea:09:3c:96:
6d:ef:a0:5f:d2:92:0d:bd:0d:68:b3:79:4f:d3:b3:
27:bb:92:dc:68:bf:86:fb:cb:b0:56:28:c1:3d:d5:
b0:f9:f6:af:06:a0:03:6b:a1:08:54:ec:d7:80:f1:
a7:64:16:08:45:b0:2c:ca:c1:01:4b:ff:46:75:30:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:9C:1B:3D:28:31:E4:A0:13:1E:A9:DE:AD:8B:8A:43:15:83:86
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:02:3f:ad:92:22:59:3d:fe:05:bc:92:c8:87:99:8b:c4:
3f:9e:30:1c:d0:26:85:09:23:10:b1:5a:76:01:1f:1a:1a:ff:
e6:56:4b:52:9a:67:57:77:3c:72:1a:6b:34:86:2f:8d:ad:85:
cb:54:1b:f5:d2:68:b6:19:f6:06:bb:6e:e6:2d:97:73:c8:b5:
78:de:3a:04:90:80:e3:db:51:93:5e:36:f0:44:25:94:f4:0e:
11:0f:94:97:c2:82:7f:79:0c:64:92:55:ca:dd:be:73:7a:d4:
a4:ef:29:89:80:00:62:6e:44:ca:b3:08:9b:7e:f1:c1:5e:e5:
38:a8:c1:f7:0d:da:67:22:c6:c5:81:c5:61:99:7c:45:2e:7d:
09:c6:58:ff:7d:10:5e:de:c4:bc:67:ff:d7:38:ef:4c:70:f5:
66:3f:c0:f7:e5:87:0d:78:c3:ea:cb:d4:44:99:52:31:0f:9a:
f3:85:09:73:6e:13:29:00:eb:c2:11:35:a5:86:29:3f:02:c0:
da:15:9e:fc:43:c3:fc:ea:46:09:7a:5a:63:03:25:65:f4:9b:
b1:c5:a3:a5:6d:1d:d2:cc:8a:07:16:83:57:d8:cb:5a:21:2f:
dd:da:7a:04:10:50:7a:9f:47:dd:e3:17:ba:f8:1d:95:a1:30:
6b:0d:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:35 2025 by rpki-client