Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: C7eM/+doSfhhTgxz6zSl3vW/5Cl3Umjp3F6f8rUAwD0=
Subject key identifier: 71:17:AC:E3:5F:C8:C7:4C:09:B2:8C:B4:DF:24:0C:63:AD:C6:E0:30
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 0199FAD857DCB1D97C331347C8903CACB8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: 015E
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: nVOfId2M/jqrSv/DG/NyFggJ02VXW+w79x9I2QAlIQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:57:dc:b1:d9:7c:33:13:47:c8:90:3c:ac:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=7117ace35fc8c74c09b28cb4df240c63adc6e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:90:64:ef:51:db:8c:9b:64:b6:5c:ad:fd:
0c:f5:51:1e:e0:33:2e:86:a5:c2:8d:3e:a3:59:c9:
1a:3c:3f:b1:15:05:a8:f5:22:46:01:23:a7:86:a6:
13:87:79:75:79:bb:66:c7:68:39:fb:ac:2f:4f:e5:
e2:49:d3:d8:ce:bc:1d:57:1e:93:61:b2:27:71:3a:
f2:82:46:e6:d9:77:6b:a4:cc:6b:c9:2b:67:e9:64:
a4:37:a4:58:1f:dd:60:57:35:49:e0:e4:ea:e8:5e:
06:6b:86:35:3a:29:c4:38:8d:45:ed:a6:89:dc:42:
64:09:a1:51:fb:a9:d1:0b:15:b6:1d:e8:5f:17:20:
2f:0f:db:48:5b:c8:eb:38:f3:71:20:4e:13:fb:8c:
56:d5:e8:19:63:ca:06:1a:53:9e:6e:67:87:58:25:
68:12:a7:1f:9b:a4:e2:8b:94:e0:34:89:36:e8:10:
89:0a:ae:00:1d:30:eb:ee:60:c8:48:16:f9:21:56:
f3:06:de:a2:8d:65:33:d9:92:a2:d3:a7:5b:7b:64:
74:37:07:2a:06:57:8e:3d:7a:d8:66:71:d9:e2:e3:
a2:c5:0e:dc:bc:75:aa:fe:ca:07:a9:8e:63:07:6a:
2a:8d:d7:8f:e4:fd:d2:90:fe:92:04:d1:e9:19:a4:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:AC:E3:5F:C8:C7:4C:09:B2:8C:B4:DF:24:0C:63:AD:C6:E0:30
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:44:16:5f:81:ed:07:b2:9c:12:2c:86:77:f1:17:a8:c7:
db:46:da:75:3f:bb:df:ec:68:78:9f:27:76:9c:55:9a:32:e4:
03:bd:fa:69:41:b7:4f:58:81:e0:2e:6d:f8:7e:3d:18:96:99:
8f:3e:87:22:43:11:0a:cc:c7:54:25:29:46:31:f9:fd:1f:c5:
9e:55:75:a3:a0:e4:5d:74:28:72:b7:bb:e5:7a:c2:22:17:31:
94:42:00:80:ac:c2:2e:c5:81:f2:6d:b5:84:84:fb:f9:42:14:
63:ee:4c:03:61:3c:df:0a:31:44:94:d3:7f:32:09:af:7a:ec:
4a:d1:62:e2:6d:98:24:17:75:47:71:7a:08:6c:fd:9e:5d:f7:
85:2f:c6:54:f0:0b:cf:40:7d:60:7f:9a:08:4f:7c:82:0c:e3:
35:50:60:f1:c9:19:70:a6:1b:16:a5:ba:a3:db:19:94:b7:1c:
08:b4:d5:eb:8d:8c:e6:b3:0b:75:a2:e3:2e:fa:56:71:1c:cf:
3f:6a:d4:6f:05:c8:71:66:e9:0b:e3:4a:be:1c:83:04:f5:2d:
42:43:a8:3f:0b:44:a6:10:64:f7:5a:a2:44:bf:f0:8b:93:da:
2a:48:ea:b7:f2:5d:46:cb:42:01:1a:59:7f:39:74:5a:7c:93:
da:3f:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:23 2025 by rpki-client