Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft
File: KipfTZdgeKzXSVfxcoF-zRnQJQI.mft (raw, json)
Hash identifier: 8vlgXn1v4uhHI7/E+8rYgrzDYzE8/YtzxR+cnmZkIiQ=
Subject key identifier: 53:F5:1A:E2:25:91:46:D1:D4:92:DF:C6:B7:5D:43:73:D8:4D:1B:EA
Authority key identifier: 2A:2A:5F:4D:97:60:78:AC:D7:49:57:F1:72:81:7E:CD:19:D0:25:02
Certificate issuer: /CN=2a2a5f4d976078acd74957f172817ecd19d02502
Certificate serial: 0199FAD7C0C84990FFD807EC4EFAB0D082F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft
Manifest number: 79
Signing time: Sun 19 Oct 2025 05:01:07 +0000
Manifest this update: Sun 19 Oct 2025 05:01:07 +0000
Manifest next update: Mon 20 Oct 2025 05:01:07 +0000
Files and hashes: 1: KipfTZdgeKzXSVfxcoF-zRnQJQI.crl (hash: od6I/DAwDH47Q6wAV+7I3yCM4jjR60aGVLU+J6C1mf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c0:c8:49:90:ff:d8:07:ec:4e:fa:b0:d0:82:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2a5f4d976078acd74957f172817ecd19d02502
Validity
Not Before: Oct 19 05:01:07 2025 GMT
Not After : Oct 20 05:01:07 2025 GMT
Subject: CN=53f51ae2259146d1d492dfc6b75d4373d84d1bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:2a:11:05:ea:fa:65:75:a5:7e:62:02:ea:
52:f4:bb:97:c9:5b:da:e6:b6:69:82:05:c4:9e:f8:
56:65:cd:75:bf:b9:d4:f7:75:6d:d1:7b:79:a6:fa:
37:4a:b0:cb:d4:4a:69:a0:f4:67:d0:ab:73:35:ce:
c5:32:47:d0:e0:8b:57:a8:7b:7b:d5:99:23:0c:12:
bf:80:fa:49:4e:37:9c:e8:9f:9a:c1:2c:db:22:e7:
35:a3:75:ac:c1:23:7d:6d:dd:e9:e0:28:cf:81:64:
9a:db:10:07:8f:f2:ee:d3:8f:78:77:6f:58:0d:5f:
f9:04:ef:4d:80:74:75:44:4c:1a:fb:fd:9c:50:21:
e2:40:bc:9a:de:bb:e9:21:f7:53:c4:66:e6:ec:ad:
b1:5c:93:4d:2b:b9:a8:5a:d1:65:b7:39:6c:0b:15:
2a:db:0e:70:b9:b1:04:e2:6b:74:6b:5f:61:f9:95:
15:eb:66:18:b7:25:c8:51:a5:cf:60:e3:47:97:52:
94:94:ef:15:38:af:f4:c8:54:d1:45:e3:ee:f4:52:
a1:c5:9a:0d:f5:f7:ff:11:86:17:83:ba:8a:4c:96:
1c:f5:ab:67:af:1c:4c:2a:c8:53:64:c5:9f:20:59:
26:d1:db:ca:60:c7:37:c7:12:df:12:ae:22:b6:33:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:1A:E2:25:91:46:D1:D4:92:DF:C6:B7:5D:43:73:D8:4D:1B:EA
X509v3 Authority Key Identifier:
keyid:2A:2A:5F:4D:97:60:78:AC:D7:49:57:F1:72:81:7E:CD:19:D0:25:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KipfTZdgeKzXSVfxcoF-zRnQJQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35049e-223d-4908-9754-38bac139c844/1/KipfTZdgeKzXSVfxcoF-zRnQJQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:37:28:43:c0:ac:52:a7:ea:e0:2b:c9:6c:85:9a:83:a5:5a:
6b:9c:bf:4a:c6:68:4e:eb:22:2f:3a:08:fc:e9:b3:78:4f:4f:
82:b5:50:d8:98:d9:0a:cb:06:73:ab:82:0b:60:00:43:e2:b5:
d5:24:3d:25:a6:47:11:d1:59:07:ed:fb:c6:be:6c:f6:bc:61:
77:df:83:37:c1:c9:87:2a:8e:19:bb:e8:75:f7:e6:0a:44:ad:
15:48:7b:7b:1e:82:12:86:db:9c:91:ba:d1:59:6d:2c:4d:a0:
e7:b6:a2:92:cf:2e:79:3f:38:5f:5d:fd:a6:1b:b1:76:0d:60:
4a:c6:73:4a:d0:ae:5a:38:bb:b0:4b:80:ef:ff:f3:82:c6:a7:
fa:6c:02:67:11:b4:a6:f4:44:d6:c7:f9:bb:28:f3:07:0e:7a:
9e:d0:4e:8c:d6:e7:ef:0b:22:4a:57:36:7a:f7:51:1b:10:2b:
ba:de:d8:6f:79:ee:9a:df:12:22:8a:b3:7d:0c:ad:32:f3:1a:
8b:42:3a:93:e3:f8:28:f5:a0:78:70:62:16:19:a7:c5:f4:22:
f4:99:6d:55:a4:1e:fe:13:5b:11:b4:36:c5:3a:ad:83:27:74:
87:ed:9d:a4:d8:dd:30:46:11:ae:8d:2f:9a:15:8e:b3:89:68:
2e:97:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client