Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: 37Zs0k8XR+y4U47JMo0oesR3X15FvFLmIZ36ZGVAdXw=
Subject key identifier: E1:72:7B:A5:0A:DD:7A:62:00:CB:C3:4F:7C:B1:59:2F:1B:44:8B:2F
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 0199FBB36F8FDBC3F4DCDED4919D0BDBE29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0A92
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: 8SvcdHN9dYol7Oi9Chv+6AYFvQ+Jic7UGakYHmZOP90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6f:8f:db:c3:f4:dc:de:d4:91:9d:0b:db:e2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=e1727ba50add7a6200cbc34f7cb1592f1b448b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:57:71:a5:b9:36:5f:ae:8a:2d:03:07:69:
37:5f:f7:94:a9:68:a6:68:de:d1:13:c4:fa:ec:5a:
38:0e:84:f1:e3:a6:fd:24:e2:22:d9:61:24:93:84:
e6:1f:fe:1d:89:ac:9a:a4:d7:56:0c:fa:49:04:7e:
24:79:1a:67:cc:42:c7:96:3e:f6:c5:8f:3a:5d:8f:
7c:b2:0d:94:a9:4c:d5:a9:3a:03:08:94:bb:76:35:
61:63:9e:9d:e4:72:a2:e7:72:7e:f0:a8:e7:df:55:
4b:4a:71:f6:ab:2d:df:54:cf:2b:ae:1c:8c:c9:e8:
2d:b0:76:2f:4f:d3:6e:68:b2:58:3e:d7:cf:47:cd:
fc:a2:6b:01:23:c7:57:de:57:32:eb:c7:c2:c9:ea:
3c:ba:f8:53:cf:04:32:7a:90:bb:82:c6:6f:e9:76:
86:12:1d:c6:cb:fd:62:e2:76:50:bb:02:e6:53:2b:
53:86:13:c0:64:fd:16:a1:32:c1:e4:6b:08:d2:ac:
d4:c8:09:c6:1b:f8:ec:cb:d5:d3:7a:21:40:5c:dd:
97:ce:95:d1:38:ba:6b:57:32:7d:69:21:dc:54:93:
07:32:a3:38:3e:ac:40:cd:54:9f:c8:4c:02:4c:28:
81:07:75:6f:89:54:9f:72:09:ef:a2:26:3e:c3:0e:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:7B:A5:0A:DD:7A:62:00:CB:C3:4F:7C:B1:59:2F:1B:44:8B:2F
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:c8:03:a8:33:11:cf:b7:ff:39:f0:e7:06:71:e5:54:1c:
49:75:0e:de:d9:95:3e:63:a5:ec:45:a2:97:93:31:a3:6a:65:
20:47:8a:21:f6:08:28:b2:16:cb:85:0a:b7:da:bf:4f:e6:90:
4a:4a:03:8e:4f:82:93:4b:2a:cf:af:b3:3c:ec:44:ed:a6:44:
a4:20:1b:43:e4:2b:e1:c4:54:fd:1d:d9:63:34:59:49:c3:97:
49:3e:b8:72:22:f8:90:6d:a5:30:e8:bc:15:ac:82:73:71:34:
18:b5:d9:e7:d9:3f:ce:b7:d4:7f:69:32:e8:55:16:66:18:63:
23:c6:de:ec:e0:b5:c2:27:62:97:45:5e:1d:df:f7:0f:03:6e:
71:87:fc:24:a0:81:a9:ba:e5:3c:f9:42:af:c8:ef:9d:23:79:
80:02:be:8f:71:df:34:7b:47:68:4b:b1:bc:18:c8:1f:d1:8e:
62:93:48:5b:d3:0b:f3:3b:9d:ce:56:8f:99:d4:ff:a5:2d:06:
18:cd:39:3e:43:1d:87:46:4b:09:f6:e7:54:b9:fd:2d:fa:c7:
d8:23:ab:21:85:42:9c:47:52:53:69:a6:53:f4:37:79:9c:72:
57:4d:31:a0:8f:df:b0:0c:83:a4:89:ec:31:27:2f:04:9d:21:
61:a4:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:00 2025 by rpki-client