Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: Ln+dElNxs60+sLAy7UX3UCu/GP9Y1GE/0OkAT2pskbk=
Subject key identifier: 40:5F:62:FD:78:5D:08:1D:42:E0:98:E0:68:21:D3:64:B9:4D:C8:19
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 019A03A3D49822B43120BA0898FF20F971BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 09B3
Signing time: Mon 20 Oct 2025 22:00:59 +0000
Manifest this update: Mon 20 Oct 2025 22:00:59 +0000
Manifest next update: Tue 21 Oct 2025 22:00:59 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: VY21XIe4NfzfmbVUdvyTjc7HPKKUVgvXipDf/PNOa50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:d4:98:22:b4:31:20:ba:08:98:ff:20:f9:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Oct 20 22:00:59 2025 GMT
Not After : Oct 21 22:00:59 2025 GMT
Subject: CN=405f62fd785d081d42e098e06821d364b94dc819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:a0:ae:44:3c:c4:37:05:34:04:77:4e:f2:
c2:b0:54:ec:1a:8e:43:73:56:87:e7:5d:c1:03:f5:
f0:9a:0b:3e:db:b2:45:26:c0:72:c2:e7:a9:f4:fa:
3d:36:9b:cc:80:41:c3:82:51:14:e6:95:4a:d5:d1:
80:8e:7a:95:b0:02:62:36:be:69:e9:fe:af:7e:96:
a2:3f:63:b3:31:b5:bd:02:af:8c:45:a9:7b:d6:33:
45:db:ed:0f:31:40:96:e5:1a:d5:c3:01:34:0d:d8:
03:5e:be:cf:85:7e:49:79:00:5d:92:4c:d8:f5:db:
c4:d4:c6:d9:4c:a2:f8:91:0f:55:48:36:8d:e1:a9:
3a:32:2b:9e:a7:b8:16:8b:2c:28:5b:30:80:63:7b:
a5:89:6f:bb:fa:e4:79:99:61:1a:65:61:4b:bd:ee:
04:14:1c:ba:25:7a:b1:fd:d1:92:01:42:69:1d:a3:
51:04:79:fd:c6:fb:5c:4f:de:7a:ef:92:5c:87:43:
6d:b9:08:b1:cf:2a:72:03:46:0c:00:6a:cd:21:7a:
b2:fc:15:75:20:d1:0e:fb:41:9c:58:29:6c:24:b4:
a2:81:02:02:4d:09:71:ef:21:86:c6:29:36:23:5a:
52:ea:57:b0:ec:77:87:8e:f5:ea:2d:d2:c7:fe:1d:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:62:FD:78:5D:08:1D:42:E0:98:E0:68:21:D3:64:B9:4D:C8:19
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d8:55:47:d5:d6:11:91:e3:81:42:e0:9e:47:98:8d:7f:a2:
8d:a0:00:2f:89:01:bf:c3:67:60:f8:af:59:eb:f7:fa:f0:e4:
ff:ff:21:6b:46:0f:ee:b0:66:d9:13:7a:d7:c9:b0:b2:04:b0:
36:45:f7:fa:99:4b:12:ee:39:4b:5a:ba:2c:f7:58:72:19:f7:
ea:89:6a:cd:44:4e:ba:92:5c:39:7b:9b:f0:82:f3:d9:da:23:
c5:a1:c6:7d:5d:ca:1d:d6:7d:53:b6:c8:fe:90:60:63:ae:38:
86:14:10:99:51:f5:3c:83:f5:0a:1a:10:01:be:88:56:a0:63:
a7:37:d4:68:55:ed:9e:aa:a6:d0:a2:23:c8:54:39:1a:7c:93:
9d:40:bf:81:d6:77:36:1a:da:c7:18:c2:16:55:c2:5f:ff:9f:
81:47:1a:7e:5d:15:20:52:da:cb:b1:8e:d2:0c:51:e6:ba:cd:
06:9a:e3:db:a4:a8:29:0c:02:40:17:3f:9f:b3:d6:9d:c3:d0:
7c:01:fe:c4:ee:0e:bd:49:78:0c:60:87:57:15:32:0b:d0:5b:
3f:97:90:fb:a3:23:da:a7:84:6a:00:d7:9b:c7:02:82:9c:56:
ab:68:8c:fa:30:70:16:8e:e2:08:aa:91:01:79:4f:f1:03:84:
d6:1b:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:59 2025 by rpki-client