Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: 1m9pYj4Ajm0DBk3gzxmQLAPLEUFQZG32dhdbm9gYfME=
Subject key identifier: D3:E0:C2:50:03:DA:8B:66:D9:27:4A:75:99:1E:55:CD:48:2E:BC:3B
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 0199FD341642D96A7FACDBB7D661053A4A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: sWwwKhQthNQENN1tjGPF9h87EO+2hI65xgk1XhsoT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:16:42:d9:6a:7f:ac:db:b7:d6:61:05:3a:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=d3e0c25003da8b66d9274a75991e55cd482ebc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b3:33:7f:cf:d6:ae:4a:a3:08:37:56:73:87:
db:b2:c4:d8:70:4f:72:c2:88:14:7c:c8:08:4a:16:
38:f1:7d:1e:c4:5e:cd:b2:5e:b7:78:12:6a:f7:92:
fb:5e:6c:1a:da:0d:58:2a:d1:c3:f2:b1:0e:88:f8:
ec:49:8b:1d:ee:60:20:1b:47:12:de:6e:26:9d:14:
7e:3b:42:c8:00:a0:51:52:20:f6:89:d6:be:26:81:
1e:21:cb:28:54:93:2a:56:67:62:90:8c:1a:ac:95:
91:c2:92:de:56:aa:81:fc:6d:4b:60:08:f8:2d:85:
d6:6c:bd:2e:c6:93:b2:98:72:41:21:ac:59:e2:7e:
1a:55:76:38:08:4e:22:2a:6b:e8:dc:d6:cc:e0:f0:
9d:42:b0:11:fb:a2:77:b4:e7:97:dd:1d:e0:86:09:
b7:c2:a2:45:4e:47:37:cd:a5:7d:f9:74:c7:1f:ac:
da:69:b5:ee:97:cb:eb:46:a7:bc:7b:d0:c1:ab:39:
ce:81:53:de:a7:a3:b4:46:a4:76:59:0d:fb:9f:c8:
00:5a:03:65:51:3c:03:73:cc:db:8d:51:dc:3d:09:
8e:6d:29:6e:50:cb:3b:ef:3a:cb:36:ae:57:3d:8c:
58:a7:f5:ca:27:64:6a:9a:10:c6:63:d0:6c:83:2a:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:C2:50:03:DA:8B:66:D9:27:4A:75:99:1E:55:CD:48:2E:BC:3B
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:f1:a6:3c:d4:14:57:48:dd:64:5f:06:5c:7c:46:6a:78:
bf:15:ab:64:71:ba:30:7b:75:0a:bf:c0:ae:6e:09:37:10:b9:
dc:ec:88:ee:e0:d7:99:9d:33:e7:97:71:cc:eb:1a:f9:26:0d:
ba:00:cc:7d:c3:cf:a1:21:f6:f9:d4:08:0a:8a:a3:c4:7e:69:
51:f7:dc:84:34:e0:ec:2e:c6:98:7f:d4:88:21:7a:f0:70:84:
86:a0:07:f0:00:5f:3e:00:d0:e7:77:51:0b:67:0f:b9:93:6a:
34:a2:6a:d1:9f:60:19:2d:09:56:81:28:48:5a:5e:e0:ac:ca:
31:ed:45:e0:93:77:cc:04:41:fd:7d:41:2f:a1:1b:b2:48:cd:
b0:ee:83:6e:29:91:59:d6:e1:76:c8:ee:1d:df:73:48:de:52:
6e:e1:25:cd:04:ed:52:96:3a:69:c0:34:f5:f3:fd:f0:3a:69:
3c:69:30:5f:36:e3:74:51:5d:fe:6c:ca:d6:52:08:56:ac:05:
cf:d5:b3:be:a5:34:4b:5e:a4:72:98:4e:c3:b0:8a:b1:92:50:
e4:0b:6e:0b:0b:e0:46:a8:3c:aa:32:25:be:3c:d4:6b:58:dc:
65:38:47:0a:e2:28:6a:6a:36:f8:7f:85:8b:dd:f5:8a:5e:80:
03:87:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:55 2025 by rpki-client