Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: lRjLzzL5Y+gdyGR88eaOPZFEVKtucxqCh7jeJ2anlGo=
Subject key identifier: CB:0F:F5:B4:43:39:6A:78:F8:1E:F7:85:5A:B4:FD:15:63:B2:7F:2D
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019A522BF5FA56FCE2ECC12EC6B38320F344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0B0E
Signing time: Wed 05 Nov 2025 04:00:03 +0000
Manifest this update: Wed 05 Nov 2025 04:00:03 +0000
Manifest next update: Thu 06 Nov 2025 04:00:03 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: KZ91iAuS+Q678O1gF7jv1QYJsvnjOKqsuqQV2nY4K2g=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:f5:fa:56:fc:e2:ec:c1:2e:c6:b3:83:20:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Nov 5 04:00:03 2025 GMT
Not After : Nov 6 04:00:03 2025 GMT
Subject: CN=cb0ff5b443396a78f81ef7855ab4fd1563b27f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:6d:1f:f0:ec:24:04:92:d5:8c:de:10:45:
1b:fa:e5:64:3e:b1:0d:53:8d:ac:b0:ae:1e:b4:60:
34:16:3c:c8:f5:04:2b:89:f8:c0:7a:f2:4b:15:89:
16:f3:9e:e8:fc:fb:72:d8:81:04:db:50:75:96:6a:
24:b9:eb:62:5b:f3:46:34:7f:2b:24:53:1d:0e:b0:
7a:64:84:b1:9b:1c:8c:2d:5a:59:60:13:d2:1c:0d:
84:f8:0d:88:25:79:a5:ca:e8:3e:b7:14:d0:b5:ff:
c4:31:aa:14:ff:95:39:13:61:8e:d8:34:d1:f3:15:
90:fe:02:f4:cf:a5:38:52:ff:5f:4e:e3:a6:b8:dd:
bb:ac:55:34:6c:23:0c:12:cb:08:c7:8a:bb:0a:eb:
fb:88:3f:3d:be:c7:90:5f:c9:69:fb:32:d1:ea:fa:
fd:b6:41:f8:7c:93:70:67:da:46:53:f5:1b:53:f5:
e6:ca:c5:78:6b:3e:82:08:d9:c3:e1:c4:0b:c0:f9:
30:a3:55:bb:4a:8e:5d:06:20:11:cb:c2:08:7e:99:
d7:bb:11:79:be:4f:ce:78:e6:c4:d2:68:7a:5a:78:
c6:7c:41:93:28:7c:55:06:3b:49:71:43:c1:32:17:
a1:b4:69:ef:ae:87:41:7a:7a:bb:55:93:e4:00:a8:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:F5:B4:43:39:6A:78:F8:1E:F7:85:5A:B4:FD:15:63:B2:7F:2D
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:53:f2:95:41:36:7c:b7:71:d9:04:e8:b9:58:3c:a1:0f:2e:
78:f2:f0:96:4b:47:ad:11:c2:89:67:a3:2d:c7:66:d4:0e:d5:
12:2f:9d:57:eb:af:51:a1:95:8e:0c:0f:d0:f9:99:cd:39:04:
42:bf:b0:05:fe:25:79:33:c9:d2:61:63:07:15:22:1f:15:61:
90:f4:1f:79:88:b1:1d:be:0e:ac:f1:ee:b4:a8:cb:9a:97:bc:
39:37:78:e4:a6:df:25:83:93:db:57:52:f6:cb:d7:40:b9:c0:
27:ec:6b:cd:c9:76:31:8d:40:d5:58:f8:17:ef:09:72:48:72:
d5:e0:20:99:1d:9a:e2:e8:e4:26:b4:5f:46:ef:15:f9:ab:4f:
f6:be:4e:83:4a:54:f9:d8:03:77:09:cd:09:29:07:46:f9:cc:
48:5f:b1:b8:41:a5:d1:64:f4:a3:bf:ea:fa:ff:31:4e:37:97:
54:8b:89:6d:71:e2:54:2f:ca:f7:01:c2:d4:a7:f6:47:d8:b5:
91:b5:7b:27:35:16:05:a6:7a:cc:42:45:0d:14:ec:9a:0c:68:
f1:5b:8a:76:37:bc:3c:f7:12:8d:3b:80:7d:28:3d:66:02:13:
48:52:e2:48:75:52:a2:9c:7f:88:ae:9c:a1:4d:10:74:e7:4a:
4b:45:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:14:30 2025 by rpki-client