Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: rwJ+PNLfimTsn4nI9PJiBVeuyuJo8bjhAcc2NXm6NMw=
Subject key identifier: 6B:DF:B7:58:DE:39:7B:02:4E:17:F6:8E:94:B3:8B:02:1F:23:1A:38
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 019A4F62CF067C6B4F218FC55B2E6EED9CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: vwlf+XqkX30KkUtXBGb4hsahOMuXtBhxbKCUpi7Zia0=)
2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cf:06:7c:6b:4f:21:8f:c5:5b:2e:6e:ed:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=6bdfb758de397b024e17f68e94b38b021f231a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:80:a5:05:c9:f6:5b:e2:a1:fb:b1:83:51:
81:b5:43:b5:22:bc:5e:12:65:33:d7:e6:f3:59:2d:
77:31:60:db:d2:0d:49:97:c1:2f:50:ed:55:14:a6:
28:d3:e3:a0:59:76:83:c2:eb:23:2d:93:9c:d4:af:
d8:26:6d:40:50:5e:25:07:73:ed:6c:c6:e2:58:4a:
5b:3f:f2:a0:ef:54:6f:51:37:9f:67:59:b7:18:b5:
b6:59:74:2d:cb:4e:ab:f7:c8:1f:ea:6f:7e:7d:1a:
08:71:ad:7d:fc:bc:d6:e5:eb:a0:38:07:30:f1:8a:
13:bc:71:da:29:39:74:df:46:09:c7:cc:d0:a0:66:
fa:3b:6f:63:32:71:a4:7b:3b:f0:a9:a9:52:4c:f3:
3f:cd:bf:3c:c5:25:01:43:5f:e5:2e:3c:1e:52:4e:
05:56:75:e1:78:1e:ad:ca:a4:a0:c9:b7:8c:02:a3:
69:55:62:8a:9d:2f:f8:9a:07:c9:0b:45:5c:04:2f:
ea:23:47:5a:aa:90:03:1e:7d:66:b9:52:57:2e:8d:
d4:b9:20:58:e0:16:8e:bb:95:41:2f:22:ea:af:d3:
b8:6e:23:18:1e:5d:e1:10:1d:87:c8:9d:e5:6c:8b:
bc:28:ad:06:f4:3c:ab:0b:80:70:05:5e:17:25:08:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DF:B7:58:DE:39:7B:02:4E:17:F6:8E:94:B3:8B:02:1F:23:1A:38
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:a3:12:71:b4:5e:27:14:40:6f:56:89:86:3a:65:92:7a:
87:43:d5:23:12:60:35:45:cb:21:9e:18:8b:d0:a6:00:48:34:
75:ba:b3:ae:50:39:22:a1:4c:2d:b4:fe:0a:fa:24:ad:fc:1d:
b6:30:af:44:d9:fe:b7:e1:d4:ba:29:4c:5d:33:df:8c:e2:7f:
10:c2:97:43:cd:55:7f:1c:a0:80:2a:d6:75:34:a5:76:cf:ec:
e7:8b:43:41:f1:c3:bc:07:1d:25:2d:63:d2:5f:80:00:6c:f2:
54:0b:6f:d0:d7:c2:06:8a:5e:db:62:d7:3e:5a:bc:22:5b:dd:
17:ed:45:10:ec:12:53:bb:11:c8:dc:79:fd:0d:dc:ff:f9:ed:
7e:77:04:11:65:d6:53:8d:b4:c6:48:c8:d6:0b:92:0d:7d:57:
bb:00:42:0c:86:48:7e:56:9c:7e:4b:10:16:79:6e:02:5b:8d:
64:93:01:8f:ee:c9:35:b8:8d:49:04:7e:57:a3:51:87:59:e2:
d4:07:9e:7f:be:0e:0e:eb:fb:98:ba:b4:95:6c:2b:5a:61:0c:
ab:d7:49:71:15:fe:62:fa:24:27:96:10:a9:ae:28:5a:71:67:
f9:f3:ab:2c:3a:81:d8:de:1b:5e:6c:26:da:49:a4:e2:be:6e:
40:0c:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:10 2025 by rpki-client