Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: 6jxJKZZ0Av+LtA73kHSji7VaqDNaQNtDc0rfjOKOOUA=
Subject key identifier: 86:36:C1:6E:FF:79:1C:95:97:B3:9D:5F:FD:CC:6A:0C:D1:86:1B:D7
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 0199FB0EDF8126CECF47FE74081A890F921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 0872
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: FCJLJN0drtWkI1xzH9+8AVSwgOeRXwVXkR/F25Osa90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:df:81:26:ce:cf:47:fe:74:08:1a:89:0f:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=8636c16eff791c9597b39d5ffdcc6a0cd1861bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:f4:cb:22:7e:7a:26:ee:15:d2:f7:76:64:
bf:7c:ae:24:30:d8:82:d4:1a:06:96:f4:be:5d:7d:
69:64:ee:7e:6f:4f:67:e0:dd:f9:90:97:0c:f0:0a:
80:b2:87:b5:91:e0:0f:a5:f4:e9:78:e1:92:cb:70:
1f:ec:3b:bf:f0:03:f4:d8:24:c6:1f:28:24:a9:7e:
a8:7f:2c:9b:f1:80:ba:5e:e7:b9:79:eb:01:6a:3e:
2f:ef:f4:a2:ad:ed:a6:89:ae:46:c8:81:e4:21:4c:
e7:76:87:5e:0e:9c:ae:4a:d3:96:16:e8:6f:21:79:
71:91:da:55:d0:13:5c:8b:b9:62:9a:98:28:68:63:
9a:f7:d2:f0:cd:00:7b:50:d7:a5:80:da:1e:61:6c:
bc:ee:22:3b:6e:54:15:85:e5:0e:d9:6d:b7:9f:48:
24:f4:c5:76:1a:4e:42:41:9e:a1:9b:b1:37:e1:19:
ed:d8:d7:38:a8:68:e3:58:da:63:ec:8e:d2:90:8c:
c0:7f:61:0f:18:5e:4d:a6:89:8b:76:17:5e:7b:00:
b7:8d:5f:4f:03:4b:f1:8d:62:be:68:79:32:84:4b:
54:df:4e:1a:83:e2:e6:91:0c:e0:d8:23:a7:2f:7d:
5d:8f:ca:32:92:60:7b:1c:49:5d:fa:af:be:ad:8d:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:C1:6E:FF:79:1C:95:97:B3:9D:5F:FD:CC:6A:0C:D1:86:1B:D7
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:80:90:12:9f:a7:da:cb:e8:f5:38:bc:06:63:16:99:a2:
51:b2:3e:9c:df:00:9e:b1:6b:50:de:25:43:f5:e5:a7:f4:d1:
62:86:90:2e:5d:7e:6b:9d:f5:c3:9c:e8:a0:c3:85:8d:a7:cb:
a2:84:96:5a:6e:c7:18:1f:65:65:2d:9f:22:4d:4f:0f:24:b0:
5c:b8:07:f9:6e:78:a4:03:d7:1d:8f:d6:b9:e8:5e:a4:25:9f:
b6:0b:58:5d:4e:d0:32:ab:25:bd:55:6f:71:c5:c4:a3:ec:15:
e6:11:28:78:55:e3:ee:72:92:d9:34:a6:eb:f7:b3:4f:1d:ec:
2a:d9:14:6e:7a:fc:50:4f:09:f9:66:40:07:a0:d1:81:36:5b:
95:77:be:87:59:b0:b2:e6:2e:78:65:7c:02:5c:24:8f:ce:a3:
cb:0a:3e:d6:81:19:26:56:e5:57:62:f9:c7:7e:25:e0:aa:3f:
51:df:54:db:e4:be:b3:3e:a8:4b:89:94:6e:19:1c:fd:10:8c:
f7:d4:98:e9:0a:b4:14:8d:c5:20:f8:ea:86:69:44:51:14:85:
82:6a:35:29:39:3f:a7:8b:e6:0f:19:d3:ad:8a:58:cf:3a:81:
be:c4:28:79:be:68:2d:8a:12:22:04:51:96:82:76:f6:09:ef:
8b:52:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:42 2025 by rpki-client