Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: e71zk/xbj5pse4jM8r67g6EfR8do2peeVYY24+fhsWU=
Subject key identifier: 29:75:4F:1F:B7:DF:A4:BE:6F:54:B8:6D:2A:4C:25:92:D1:84:FD:AA
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 0199FFC766C7B98457C539D968224E434FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 07CD
Signing time: Mon 20 Oct 2025 04:01:21 +0000
Manifest this update: Mon 20 Oct 2025 04:01:21 +0000
Manifest next update: Tue 21 Oct 2025 04:01:21 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: RINacMnwbGL9RdZUkTz+MV4l5UbP5jakJol2NHP2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:66:c7:b9:84:57:c5:39:d9:68:22:4e:43:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Oct 20 04:01:21 2025 GMT
Not After : Oct 21 04:01:21 2025 GMT
Subject: CN=29754f1fb7dfa4be6f54b86d2a4c2592d184fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:9e:88:6b:4d:f2:6a:18:54:7e:cf:3d:bb:
7f:20:d5:2e:4b:38:3b:51:67:25:ff:2a:9c:20:43:
9e:ce:66:94:f1:a4:fd:52:d2:75:4c:79:c1:56:62:
ee:43:24:19:6d:70:b0:90:4d:3f:3b:f0:99:bb:68:
8e:37:2e:3b:56:33:2b:ec:5c:31:3f:e9:97:86:8f:
49:1b:e2:c0:c7:15:b7:e3:0b:ff:18:7a:c6:d5:66:
5d:6d:d6:5e:78:e9:8d:da:f2:02:36:3c:07:fe:4a:
07:f0:02:13:39:a1:2e:07:9f:92:09:12:7f:d4:de:
bb:7f:a2:e7:aa:52:ba:64:9e:78:45:d3:2e:f7:25:
03:7b:11:7e:6b:40:0b:66:9b:37:b0:05:f7:91:44:
44:f1:b5:06:c7:68:e3:ca:48:73:54:2c:3e:93:64:
28:29:69:fb:a9:a7:d4:64:29:e4:cd:eb:5e:fb:82:
44:a0:98:6d:cd:a2:ac:02:3a:8a:76:db:86:da:58:
9a:1a:24:dd:33:67:dc:1f:f3:4f:dc:fc:9a:16:54:
68:fd:7f:18:cb:2d:cd:8e:ef:01:f2:f6:aa:97:8b:
7c:8b:04:d9:1d:d8:c8:68:4f:8c:49:01:8e:e2:e8:
80:be:36:8b:d3:18:c3:73:dd:66:1e:5e:d7:49:6d:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:4F:1F:B7:DF:A4:BE:6F:54:B8:6D:2A:4C:25:92:D1:84:FD:AA
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:c2:2d:35:73:9d:ed:b8:ed:21:40:e1:d2:a7:92:69:64:
0b:33:c3:b5:88:ee:88:d0:7b:1e:51:0c:63:73:75:23:ac:9b:
34:da:9c:87:8e:3a:c9:b2:9f:88:7d:8c:cb:9b:ea:b6:ec:7c:
4c:ad:08:40:86:e2:a1:0e:4f:4f:d7:2f:2d:8f:29:f9:82:7d:
b6:5c:fd:63:5a:51:a2:d4:30:b3:f0:8c:c6:0a:16:e2:6b:cb:
e1:16:85:54:f4:f2:50:a6:96:ac:1c:5f:0b:a6:b7:ff:1f:ed:
a2:e4:07:fc:9c:91:15:31:a1:7c:e6:f8:c1:94:78:d5:89:09:
7c:b7:e0:ad:30:df:cf:78:9d:f5:4b:41:6a:72:76:87:53:a9:
fa:71:50:f8:4e:13:0b:5c:f3:2b:13:88:5d:ce:ab:25:3d:21:
b1:be:8d:65:10:e2:b0:61:69:32:1d:58:2e:d4:59:d0:1a:9a:
07:9b:dd:6b:44:82:67:29:9f:ca:69:f2:2b:eb:c4:2e:27:d1:
5b:7f:c9:69:5e:ea:8f:da:5a:89:4a:e9:c3:3a:ff:2a:4b:79:
ad:bc:aa:4c:77:30:5d:c8:15:d1:90:7c:7b:e6:93:f3:b4:36:
fc:a5:6f:a6:d5:b3:ba:31:43:cb:6c:45:6a:2a:12:0f:6f:9b:
5e:ea:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:15 2025 by rpki-client