Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: NcauzthKkV+/7qJYwN/1exwPj7wIWiGGDW9A4Y9tjHc=
Subject key identifier: 0F:59:A7:3A:9E:6C:A8:89:F2:C6:F5:62:F2:22:E3:0A:60:C9:F2:2B
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 0199FC8F442BCD906C0400907CBE537708F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: YdHhlLg7w4++vPEhzOmYf+izRar6RRlAA2O2JjibJw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:2b:cd:90:6c:04:00:90:7c:be:53:77:08:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=0f59a73a9e6ca889f2c6f562f222e30a60c9f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:03:04:61:90:ed:6a:05:7c:fd:4b:ac:9f:
be:f2:4a:a0:30:7f:2e:eb:19:59:a9:2c:da:a7:fb:
91:1e:e4:dc:1a:0c:61:74:d9:80:cb:db:42:cb:91:
a8:10:c8:3e:81:64:d3:c7:1e:4c:f8:97:e2:d7:45:
74:30:90:66:44:9f:6b:1e:a3:10:32:49:ad:8d:c6:
65:5c:40:c8:e7:11:61:20:15:25:e8:d1:16:a1:77:
72:87:53:1b:30:46:31:7e:ff:f6:a8:68:20:4e:82:
c8:74:87:fd:62:e8:fd:dc:dc:f2:9f:de:76:94:92:
cf:09:eb:21:2f:b8:60:b9:24:25:16:75:b3:a1:aa:
48:4f:b3:34:cf:06:e2:a5:b9:43:6a:f6:2d:a4:b1:
3a:f2:49:a3:01:31:6d:99:57:0f:ce:9c:88:fa:28:
14:b0:a5:40:d3:b4:f2:31:77:e8:9a:19:06:4d:19:
d8:4e:a0:bf:20:07:ad:e3:2b:28:8f:d9:88:b7:88:
8e:c9:a8:1b:af:fe:9b:fb:78:0b:b5:5d:91:b0:97:
e9:cf:17:dc:b3:39:a0:7c:f9:a2:bd:dc:20:64:60:
7c:b2:40:46:d9:45:40:46:77:84:b0:8e:eb:21:a9:
2e:0b:f9:a6:f3:36:db:5a:bf:28:f6:75:2d:30:31:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:A7:3A:9E:6C:A8:89:F2:C6:F5:62:F2:22:E3:0A:60:C9:F2:2B
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:d7:89:99:f9:23:15:04:e2:e8:8b:ed:95:e9:fe:60:14:
6f:70:7a:93:c7:3e:d8:5e:55:a2:db:58:ca:17:9e:e4:4a:2d:
71:fd:c1:3c:ae:fe:99:0b:c3:52:a3:d7:5b:b4:b7:ea:4e:76:
59:1e:36:2e:7a:1b:c5:70:cf:68:b5:60:bf:3e:c0:94:fe:81:
05:51:ff:e1:9c:43:3d:10:f3:b8:f0:88:eb:cf:58:c3:c3:03:
2b:8b:f0:00:a4:f8:c0:59:1c:d2:5c:cd:27:c5:da:b4:9c:99:
e9:82:a9:d0:34:8f:80:18:40:15:c0:ab:e8:13:37:29:48:18:
72:5b:f9:44:e4:69:36:33:7f:d3:cb:35:71:25:61:69:ae:8c:
b4:a5:2f:aa:1b:84:cb:44:f5:e8:80:35:b1:c4:5a:e5:67:88:
7b:6c:61:41:63:d7:d0:a1:66:89:96:3b:eb:77:af:cf:5c:40:
0f:ff:cf:99:3c:e7:78:3a:ca:1b:d1:f2:d2:a8:1f:f5:05:4c:
e6:5e:37:ed:08:a1:5a:da:d5:63:ed:64:af:c8:8e:75:4d:cf:
b5:0b:d5:38:f8:01:8e:b3:d8:fa:e4:0e:f6:ba:4e:79:bf:99:
69:28:ee:8b:7d:48:0d:25:38:bc:e4:cc:49:d9:a1:a8:14:5f:
9d:42:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:11 2025 by rpki-client