Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: BDnlCzShP1u0RTpJ8riVgEw6yULwugcLywpK4xwAfVM=
Subject key identifier: CF:31:F3:1B:8C:7A:97:93:D1:D6:28:6D:71:CF:FE:6A:43:9D:0E:E6
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 0199FC8F80FE789FEA5E9380B63A34205CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 05A7
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: 3nm1dh0fH0xAs4va0L0SU07B3cOODsIGAgtjFBkKjIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:80:fe:78:9f:ea:5e:93:80:b6:3a:34:20:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=cf31f31b8c7a9793d1d6286d71cffe6a439d0ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:b7:a5:d9:63:68:8a:26:f1:72:c8:b7:da:
18:cf:7e:3b:eb:d7:db:4c:90:af:6d:7a:1b:c0:15:
bb:e5:b8:96:0b:73:e8:dc:f9:d2:14:1c:97:f9:fd:
ad:d4:65:21:5d:e7:cb:29:44:2b:0f:6c:06:08:e2:
15:c5:9b:cf:87:49:b4:19:e3:78:2e:f9:4c:64:08:
e7:4d:bd:0c:fa:ee:07:37:f9:71:3b:85:f2:2f:2c:
39:f8:dd:b3:b4:bd:26:b2:36:71:12:bd:8d:fa:de:
a3:a7:70:f6:84:bf:de:ea:14:94:79:9f:08:a2:c1:
f7:78:4a:04:05:55:4d:21:ae:14:ff:b3:a4:bf:07:
81:12:19:bf:d0:1b:b8:32:f4:25:ae:d0:33:18:f9:
79:42:fc:dd:65:72:4a:97:15:15:83:81:9c:bc:f7:
cb:ce:b6:a6:f5:dc:19:c2:a1:fc:ec:3f:7d:90:04:
d9:c1:10:22:ca:ba:a1:b9:47:16:13:a4:20:53:aa:
99:aa:33:98:24:c4:6a:6a:8a:33:c0:30:a6:a4:8f:
1a:33:13:67:cf:e4:8d:a6:c4:90:32:bf:fc:d2:f8:
ae:6b:ee:18:ba:2f:f6:9f:92:ad:12:ce:ed:fe:c9:
f5:fa:96:e8:50:d3:05:f9:85:fd:78:d9:ef:90:33:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:F3:1B:8C:7A:97:93:D1:D6:28:6D:71:CF:FE:6A:43:9D:0E:E6
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9f:1e:18:6e:f9:c0:51:28:9d:6c:a8:a5:7f:11:84:ba:26:
e2:3d:bd:4d:d2:2d:26:e1:3e:db:58:8d:32:92:d0:ce:e2:62:
d0:e0:c0:77:05:60:b6:a2:9f:83:17:94:ed:2e:e8:6a:70:36:
1d:29:f7:4b:c8:00:3d:a8:8b:0f:f1:e1:a8:66:72:e2:17:11:
94:ba:40:8d:ed:de:c4:d3:24:db:6a:5f:11:e7:72:38:65:e8:
1d:34:10:fa:ce:c6:b2:4b:93:88:47:85:26:e3:30:37:6e:ae:
6d:51:db:b8:af:a1:b3:da:b6:ba:58:91:55:75:78:3b:d5:f0:
d1:fa:8b:d5:80:42:0c:ca:cf:bf:13:ab:6d:29:a6:1f:70:63:
ed:62:20:11:df:46:e5:d9:e2:5f:8b:9f:78:49:7b:5b:32:12:
ab:40:75:9f:84:b1:04:66:49:3d:81:bf:8d:a5:8d:7e:2a:74:
91:d5:35:59:3c:5f:ae:d0:75:49:39:dd:e0:da:b1:5e:14:bf:
6f:88:87:d8:89:61:32:c9:85:b5:ee:69:67:a1:ad:f7:77:05:
cf:e1:9f:d2:4f:55:03:1e:d7:49:63:c7:15:1b:93:f2:b0:60:
3f:10:2a:a7:33:55:8d:96:52:a3:7c:d1:77:91:09:76:e6:89:
7c:e6:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:55 2025 by rpki-client