Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: s2VNHjRgoB9DUOUsthot+VWOyiV1AYcJhiXGG5zs96g=
Subject key identifier: 65:9B:76:4B:45:19:39:57:CC:26:26:85:EA:9E:3C:9B:2A:71:C7:4F
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 0199FFC87BA6116389A9AD4230A58B227B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 0F99
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: 2yiqwB1srHpftosLTd+OwdDEKMPdueWiQcwuUT644Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7b:a6:11:63:89:a9:ad:42:30:a5:8b:22:7b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=659b764b45193957cc262685ea9e3c9b2a71c74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:b7:67:7a:6c:61:4a:73:71:76:dd:d4:13:
13:ed:3c:44:d3:2e:ee:17:ed:6c:a6:21:c1:44:be:
fa:7a:de:13:d0:f1:aa:b2:fe:87:a5:c4:86:99:7f:
3e:34:d3:a5:88:ea:ac:a5:9a:2e:28:0c:a4:8d:a3:
69:3f:1d:43:b8:27:3d:45:58:c1:e0:8a:84:0c:84:
ea:11:5c:6a:49:ad:f0:77:4e:26:fd:cb:de:2f:31:
87:6f:20:c9:cd:b9:e7:27:be:72:45:81:68:78:76:
29:cf:ad:25:18:a8:61:a7:cb:3b:f6:99:b8:03:32:
90:19:78:34:d4:cd:0f:ba:00:df:ed:33:19:43:c3:
7a:9c:7c:57:86:03:62:31:e8:05:3f:66:b0:d2:2c:
65:16:0e:db:ca:83:3b:a3:dd:bd:66:97:fe:32:3f:
a1:8e:ba:e2:41:8d:c8:bb:f3:6d:02:29:3d:ca:ea:
23:da:eb:ad:f4:86:05:91:57:69:b3:6b:55:ec:d7:
85:43:45:e3:83:c5:ae:5a:a4:21:48:e5:db:68:e7:
20:26:db:02:18:d7:79:f4:09:c2:30:a3:c9:2c:30:
f6:9a:97:8f:5f:52:0d:f0:53:e2:57:5d:50:cb:a7:
41:18:2d:7c:1f:76:9f:f2:53:83:de:12:80:0b:b9:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:76:4B:45:19:39:57:CC:26:26:85:EA:9E:3C:9B:2A:71:C7:4F
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:63:0d:53:4a:e2:7a:ca:1e:ba:4d:65:7a:5c:41:09:15:91:
3c:19:0c:79:37:4d:a4:a5:e6:86:13:90:4d:7f:f1:e7:24:70:
30:9b:0b:3b:6e:3c:22:18:e8:5c:b9:f5:f3:7c:45:f1:cc:f1:
17:c5:95:e1:4f:63:44:ff:85:65:98:3d:a7:0a:7e:cb:2c:7c:
05:76:d0:3b:cf:ec:16:e3:ef:83:9b:c1:14:33:4d:d5:aa:81:
d9:60:73:88:38:6f:f6:cc:b5:5d:25:8b:fa:97:7f:bf:a2:06:
d1:9e:3e:0f:26:8b:6f:e4:f5:5f:19:3f:86:9c:16:86:e3:68:
10:c2:fc:d0:59:51:c3:66:b5:72:79:e2:1e:19:1e:f7:61:30:
5b:3b:60:3d:34:33:0a:77:41:43:a5:ff:8d:5f:2b:e7:a9:1e:
43:fa:e0:91:35:93:5c:7c:e6:5c:77:4d:1b:cb:5d:c3:f1:4c:
b7:d4:a8:6c:19:36:bf:b1:73:9f:ed:d0:2e:ea:8a:54:fb:d3:
ab:df:cc:e9:2b:f5:98:47:11:b4:10:73:e1:d8:e2:d0:ad:5d:
96:90:62:5f:0d:47:fc:20:97:ea:f2:94:8e:00:9c:af:36:b6:
97:14:88:b9:5e:60:9a:8a:55:3f:54:e5:c6:54:23:d1:94:55:
9a:0f:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:53 2025 by rpki-client