Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: guqU/cQNlKQe6v3xxjjJA46klWZ+GzSay3chn+bV8Cw=
Subject key identifier: 7D:BB:AA:67:66:02:1F:FB:F5:F2:8F:0F:F1:6B:32:FA:78:7E:95:9F
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019A4F61DF94C9C17B0A5829EF828B0D2AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0A4A
Signing time: Tue 04 Nov 2025 15:00:05 +0000
Manifest this update: Tue 04 Nov 2025 15:00:05 +0000
Manifest next update: Wed 05 Nov 2025 15:00:05 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: CVs9/I1bkOf+IrMlwqwVejWWaajKPJ4iSMDDueX36Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:df:94:c9:c1:7b:0a:58:29:ef:82:8b:0d:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Nov 4 15:00:05 2025 GMT
Not After : Nov 5 15:00:05 2025 GMT
Subject: CN=7dbbaa6766021ffbf5f28f0ff16b32fa787e959f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:58:03:21:a1:de:09:0c:46:50:e9:98:ab:
b8:8c:45:e0:fb:9e:99:29:e3:b3:9c:5f:57:f3:df:
56:87:4f:ee:a1:aa:91:88:e1:0f:12:3f:17:38:9a:
b8:00:2f:70:a5:c3:aa:ae:81:3e:b8:3d:57:83:86:
5d:b1:04:a0:1f:80:74:7c:ed:6a:d9:fb:ef:f5:20:
ed:6b:54:cf:ff:c5:91:3b:b1:5c:d2:97:f2:ef:b8:
6e:71:6a:b2:ad:ab:c7:33:e2:d6:11:04:07:b2:b8:
a8:71:f6:5a:f8:82:bc:d4:8c:4a:06:f1:31:b4:2d:
e6:dd:a3:8a:7a:75:47:5a:f8:17:17:75:66:51:1c:
ea:86:3d:28:97:c9:1d:fe:6f:ee:70:92:e2:08:34:
6c:94:93:5d:4f:af:1f:5e:71:b6:a1:41:bb:98:d0:
1e:5f:ef:f9:0d:f7:ee:7d:63:dd:6b:15:9e:6f:0a:
18:61:ea:9b:3a:30:9c:f6:11:22:ed:28:bb:6c:1c:
db:e6:ab:b1:3b:46:56:53:8c:b3:13:62:6a:be:e1:
68:58:32:6f:cc:d6:78:1c:c3:37:f4:c6:de:67:15:
b5:2e:dd:a1:cc:61:83:a3:aa:c3:71:9b:ac:4c:94:
8a:e0:1c:48:70:13:fe:a2:91:f4:d6:57:18:b8:ae:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:AA:67:66:02:1F:FB:F5:F2:8F:0F:F1:6B:32:FA:78:7E:95:9F
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cb:b0:60:c6:36:42:e7:a9:71:7c:45:ee:bb:83:9c:7f:23:
38:f9:e0:fe:90:6a:79:92:49:ea:81:87:32:12:ad:a2:f4:ae:
b9:b7:af:8b:2e:93:57:9d:e1:2e:80:7d:86:10:2d:71:33:ae:
da:67:4c:70:07:de:bb:c4:46:54:a6:d6:47:2d:71:2c:0c:36:
0f:f6:42:b5:25:1f:3f:ee:03:a0:b8:44:02:8c:86:e9:38:d8:
6e:4f:7e:0f:f0:62:40:2c:1a:8b:bf:2f:84:03:5e:a7:50:4a:
6e:fc:db:f2:44:1e:34:b2:a6:a2:e7:a3:e8:3a:b7:59:54:8c:
b6:66:b5:d6:8c:d2:78:2e:df:5f:1a:77:90:fb:1c:24:af:4f:
fa:58:59:30:8e:5c:a7:ed:72:ea:00:98:71:ef:65:c5:2f:7a:
52:ad:7b:46:f4:86:91:a7:22:3c:98:87:1f:b4:32:ea:91:20:
e8:ce:aa:35:ff:d6:4e:c1:07:e9:b8:91:ba:3e:15:df:38:e6:
d8:cb:db:78:c2:29:d2:92:5e:59:70:12:a6:9b:78:aa:1f:bd:
92:73:ac:6e:73:05:56:fb:5c:50:97:64:2a:87:60:e7:16:96:
45:5d:7d:7b:80:20:55:99:05:08:bd:34:46:2d:d4:18:af:cc:
89:8b:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:18 2025 by rpki-client