Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
File: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json)
Hash identifier: fc4txrQLBf/AU9NY1zhgmU0Omx2m76XxNeTVfTZe0Vw=
Subject key identifier: 76:4A:92:58:96:DF:D2:0F:F6:4B:E7:7E:AE:E5:D0:7F:90:D8:C7:39
Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
Certificate issuer: /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Certificate serial: 0199FCC67DEEA80CC6DE05684E4C1A4172D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: +z8GBX4pZvwAb++8A2QMkJ4lfwaRYSOP8PAqCBCrMBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7d:ee:a8:0c:c6:de:05:68:4e:4c:1a:41:72:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=764a925896dfd20ff64be77eaee5d07f90d8c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:b3:1a:1c:64:e2:b1:b5:1c:2a:53:33:a5:
e8:31:1d:a5:a4:b9:e0:d5:20:ce:c8:2b:fc:c1:b9:
5f:25:2b:c6:7c:c8:33:4f:7b:c3:bf:95:4d:5b:23:
22:51:87:73:61:5d:c3:dd:9b:fc:ac:06:a8:5e:74:
c0:28:f1:1a:f8:1a:44:32:2c:91:59:47:70:f4:a1:
9b:0b:9c:9c:34:67:5d:74:94:8b:2a:78:f1:a8:1c:
88:27:69:c2:31:3b:81:47:0c:a3:a1:cd:fb:22:97:
51:ac:e6:0d:34:19:25:92:5b:af:0a:84:ff:fa:90:
d9:96:63:97:65:ac:c2:75:57:b1:96:11:5b:24:0a:
cc:16:c9:4a:9f:e7:4d:67:e5:85:8b:de:db:ea:15:
c1:f1:08:89:4a:4d:e1:17:77:ec:e6:eb:0a:58:60:
b8:e1:4f:bb:c5:09:80:6d:74:5c:3b:b6:ad:12:75:
58:f9:c8:2b:1e:50:1c:36:a5:ae:a7:1d:5e:7c:76:
a3:ae:8d:c8:c4:d4:e3:4b:25:09:49:21:05:da:d4:
6d:c1:4a:71:1c:2c:dc:a2:35:63:eb:ea:ae:73:aa:
83:a2:46:7b:07:d3:7d:e0:56:e4:25:6b:97:fa:b3:
ab:cf:c2:18:43:49:6c:a0:d1:6d:67:ea:f9:bd:f9:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:92:58:96:DF:D2:0F:F6:4B:E7:7E:AE:E5:D0:7F:90:D8:C7:39
X509v3 Authority Key Identifier:
keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:17:b5:2c:17:25:02:11:4e:53:1c:b6:18:66:62:df:12:
c4:67:e3:5f:ef:e0:6c:1a:92:7b:55:0c:a3:1e:f3:fd:77:47:
fd:ae:47:7d:3e:37:b9:65:ce:a6:25:5c:22:0d:ce:ca:8a:e3:
ca:43:e2:ff:b4:f3:e2:e3:e0:9d:34:57:b1:fb:c3:28:cf:9f:
75:fe:c7:eb:8e:63:93:fd:42:c7:c0:6d:7e:4f:c9:42:3e:5a:
f5:97:ea:79:2e:ac:f4:be:05:08:d2:04:12:17:b5:e1:9a:dd:
73:26:9a:08:09:ed:4c:8f:4f:7a:36:5c:66:e9:bc:2b:85:02:
d4:2a:3e:8e:63:93:72:d4:ef:7f:f1:36:b4:84:bd:b4:85:6e:
c6:33:bb:35:a2:ad:47:31:4a:eb:88:5f:05:87:81:7f:86:1e:
b0:5c:b9:5e:63:7e:df:8a:36:2f:9c:f4:dc:22:68:9d:1a:d2:
77:fc:01:34:72:7f:c7:9c:fa:af:9d:18:7a:6e:9d:32:44:97:
28:b6:a0:75:04:fc:39:df:9b:77:9b:95:b2:b0:7d:79:89:43:
ea:ee:35:9d:28:df:05:79:e4:13:0c:87:06:a1:d4:42:55:06:
e4:9b:c6:25:0c:16:b4:97:ef:06:1e:de:cf:05:05:73:50:23:
88:37:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:40 2025 by rpki-client