Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: /3aZB4sp36Np0q2oBW/dQGPwRcpST4lO//UAT54z3Kw=
Subject key identifier: FC:BA:43:F1:65:0D:B9:DC:5D:7E:AC:11:F9:8C:03:A4:7D:62:3D:D4
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019A5119E3A7F17FE6ADAABA8D8FBC88C3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 03DA
Signing time: Tue 04 Nov 2025 23:00:42 +0000
Manifest this update: Tue 04 Nov 2025 23:00:42 +0000
Manifest next update: Wed 05 Nov 2025 23:00:42 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: zDYejsRdSG2KCDZuqqBsPa2VTTSK2nx9P316QXjvWp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e3:a7:f1:7f:e6:ad:aa:ba:8d:8f:bc:88:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Nov 4 23:00:42 2025 GMT
Not After : Nov 5 23:00:42 2025 GMT
Subject: CN=fcba43f1650db9dc5d7eac11f98c03a47d623dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:51:28:4b:ab:97:cd:5c:b7:ac:ef:48:22:
bf:07:fc:43:4d:14:4a:02:b3:c9:93:26:69:5d:ab:
ef:cf:d1:c7:22:f9:e9:85:a7:8c:82:9c:04:3e:d5:
96:37:cf:45:c8:ef:43:7b:35:29:ba:4d:80:53:e0:
45:5b:85:d7:05:5c:a1:13:e8:d3:09:11:6e:f2:f3:
06:26:80:20:c3:ea:a5:3e:6e:4c:4d:e2:92:b3:41:
c0:5e:fe:d2:9e:36:bd:ce:61:21:e6:34:c2:87:15:
64:ad:6d:f4:2f:82:bc:43:df:b1:a7:7b:52:c1:c3:
45:2d:64:d4:b1:96:46:ec:47:7c:20:b2:0c:a1:66:
cd:a6:fb:60:95:3a:dc:2c:ba:12:7c:ce:85:a4:3e:
3a:07:95:7b:79:25:d6:7c:86:9c:e6:d0:58:d3:94:
44:5c:d2:22:38:31:5f:45:7c:36:ce:41:ec:ee:2e:
bc:6f:04:39:63:6e:4a:76:e6:5c:1f:eb:49:7a:da:
d9:14:7a:37:97:d7:fb:67:21:fd:b3:d2:ea:49:55:
26:0b:f2:a7:22:da:41:3d:aa:ed:3f:da:0e:cc:cb:
39:83:65:9f:ba:f4:55:14:89:82:15:8d:da:50:2d:
c5:af:c7:e4:87:ee:87:19:4d:fc:13:f5:b5:84:65:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:43:F1:65:0D:B9:DC:5D:7E:AC:11:F9:8C:03:A4:7D:62:3D:D4
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:99:c4:85:b0:68:22:6a:dd:e2:70:47:27:f7:de:90:cb:
a2:a1:fa:6e:c3:d3:d9:76:bd:87:3d:e7:8e:ca:27:d6:b0:2b:
cf:74:4d:96:03:87:c1:22:de:b3:0d:9e:be:a9:64:03:86:24:
0f:ed:c2:45:c6:df:17:78:39:ad:1d:c8:e7:6a:4e:4b:73:aa:
3b:9d:c7:d1:ba:3b:23:bf:d8:6e:04:e2:60:0a:aa:b2:cb:b3:
87:44:d2:df:16:00:6a:78:79:01:11:e0:23:7d:59:0f:43:9b:
3b:e4:c4:b8:b0:0f:c1:53:e3:75:d6:16:07:70:7e:c4:8f:01:
4b:17:5e:c4:17:42:2f:bb:b6:a6:7c:36:2a:46:0f:ba:05:df:
1e:03:de:c0:a2:f0:92:97:e0:6c:6e:65:a8:67:3c:3d:04:63:
fe:6e:c7:38:4e:6c:b5:fb:d8:7f:80:67:bc:e1:bb:73:a4:b8:
6d:bf:d0:40:97:91:8b:19:d1:80:a3:b1:0d:f5:90:b2:82:82:
70:02:9f:cf:8e:67:e3:ae:c0:f6:14:d6:ec:e4:d5:24:98:17:
df:77:c3:8a:47:57:20:ba:b6:ac:d8:2b:77:e7:14:fe:d5:72:
5c:68:f3:ee:1a:51:f3:66:0e:14:85:d6:a3:af:92:8e:60:c3:
f1:df:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:51 2025 by rpki-client