Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
File: kZ7Nu3kI36w6rapeSRbyhchQzLc.mft (raw, json)
Hash identifier: gtutqlrcvi8PLSiZ9yy5frTz+pmxOOtB2F9FkvN6dws=
Subject key identifier: 98:96:2E:D3:6B:A9:E4:B3:C7:9E:83:9B:A9:DF:8A:A2:F5:BB:89:B6
Authority key identifier: 91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
Certificate issuer: /CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Certificate serial: 0199FAA11371188F54E867AA3A17F00D88C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
Manifest number: 52
Signing time: Sun 19 Oct 2025 04:01:24 +0000
Manifest this update: Sun 19 Oct 2025 04:01:24 +0000
Manifest next update: Mon 20 Oct 2025 04:01:24 +0000
Files and hashes: 1: kZ7Nu3kI36w6rapeSRbyhchQzLc.crl (hash: 3zN0XvC/9xGCKImt6JHwlbqNSA4Nz+f1G8iHusfdmAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:13:71:18:8f:54:e8:67:aa:3a:17:f0:0d:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7
Validity
Not Before: Oct 19 04:01:24 2025 GMT
Not After : Oct 20 04:01:24 2025 GMT
Subject: CN=98962ed36ba9e4b3c79e839ba9df8aa2f5bb89b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:b4:46:bc:d5:f7:cb:66:7d:4f:90:32:dc:
9f:74:d2:d6:94:61:b0:8f:93:77:5c:e0:34:6c:fe:
7f:04:a5:c0:d4:61:78:3c:08:b0:87:10:95:68:9d:
2b:b3:a1:5d:ba:a8:b0:ba:ed:df:d1:28:a9:47:9d:
81:9b:b4:50:a9:45:8b:c4:dd:3c:29:be:d9:4d:62:
c2:b9:1c:87:07:aa:46:30:cc:18:39:43:77:9a:0c:
75:3e:74:ed:b1:99:84:e9:cd:2e:b2:3d:a3:34:23:
2f:ca:50:1c:0f:25:a1:88:55:f4:35:70:27:4e:1e:
46:f6:8f:b5:77:56:e7:15:b3:05:c4:7e:03:3c:70:
d4:e3:13:a8:e4:c4:21:5a:5f:18:3b:73:49:ac:d1:
14:c6:7b:af:54:9e:c3:d0:fb:93:0a:b3:30:96:95:
d4:02:96:62:71:29:b7:38:83:ad:73:fc:55:5b:67:
8a:9f:7e:66:d3:15:ae:6d:6f:7a:51:2c:2e:1c:c8:
db:a2:6b:40:7d:4f:23:38:3c:d8:25:34:f4:f4:e0:
2c:f0:e3:92:0f:b7:d8:81:df:02:40:5d:6d:84:3e:
cb:dc:77:c0:1c:7b:78:e6:ba:51:b4:f6:39:15:9e:
42:73:31:29:69:c9:41:d0:f2:9e:6f:7b:9c:f2:f7:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:2E:D3:6B:A9:E4:B3:C7:9E:83:9B:A9:DF:8A:A2:F5:BB:89:B6
X509v3 Authority Key Identifier:
keyid:91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:12:4c:c3:3c:03:f6:f9:a1:c8:aa:ca:a7:37:36:3d:01:
dd:a2:20:35:fd:b6:bc:23:8b:a8:0c:1b:fa:1c:78:34:8f:f2:
93:07:c3:95:fb:c6:7e:f6:3b:fe:bb:5f:21:6c:69:3a:a7:5e:
e2:89:f4:90:ab:08:66:7a:5f:9b:3d:d5:7a:76:4b:f3:eb:90:
a4:b7:7a:f1:b6:56:4d:6f:7a:95:35:3d:9c:a6:7b:e0:ee:5d:
8f:2e:c5:a7:66:27:ef:f1:4e:95:21:f0:bd:2e:c4:a1:cd:af:
3a:66:87:20:cc:ee:29:2b:b5:f9:b1:1e:1a:af:33:f5:d6:10:
4c:a4:fd:73:b3:62:fd:19:62:d1:89:89:28:57:44:a1:9e:a6:
59:50:df:36:b8:ad:29:e5:c1:f5:16:8b:5b:8f:33:a8:c6:ad:
72:15:30:71:23:f3:3c:88:83:a2:de:8a:a2:23:60:76:69:fb:
d2:7d:a7:0c:87:70:82:f3:26:46:1d:37:2c:5e:1f:4a:41:78:
23:1a:7c:e8:59:18:2c:34:e6:b1:44:4f:38:de:a8:60:da:7c:
b0:e3:c6:84:25:b3:fe:b5:bc:4c:56:ca:43:89:35:35:94:93:
dd:2e:b2:1e:e2:7b:b1:8f:de:2b:13:50:02:1d:a6:ed:f4:04:
93:ac:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:28 2025 by rpki-client