Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: RRBqXvLY0bxxjrtCKHiTx2qvVDwFTlcQbEmp2L7Tt94=
Subject key identifier: 3C:51:8C:D9:27:63:68:FC:E1:CC:13:A2:6A:3B:B0:32:05:E0:60:41
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019A50075885AF9591076A628EDF7550864B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: 3nhopbtOu6KaS50p6kUwa0vKwB+b8Q8hWmyKdxpCtFc=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:58:85:af:95:91:07:6a:62:8e:df:75:50:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=3c518cd9276368fce1cc13a26a3bb03205e06041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:3e:25:57:84:68:fe:cd:b2:bb:d7:bc:7f:
6e:94:30:3c:5c:61:75:e6:7a:93:1d:99:7f:cf:23:
f1:17:3a:1d:90:a6:3a:97:30:08:5c:3b:44:90:e3:
9b:57:30:ba:4f:3e:98:b0:84:c8:18:91:5f:b2:04:
37:1c:51:4c:00:59:a4:63:c7:d6:67:45:79:bb:16:
0b:3b:94:40:27:87:24:fe:2d:55:ae:60:f0:d7:61:
90:96:fc:7b:c1:53:4f:d1:9e:0b:3a:5a:53:32:97:
bf:9e:d7:02:61:d4:49:bd:4f:23:ec:53:01:08:4f:
ee:95:c2:ca:b5:12:08:47:9f:8d:3d:b8:20:8e:2a:
9d:88:7c:5b:8f:d3:09:1f:8a:a0:00:4c:06:aa:92:
da:e7:69:5e:7d:4d:5a:4b:78:9c:b1:6f:e6:87:19:
7c:33:b8:ee:db:a5:37:c6:b5:8e:cf:f7:86:e0:bf:
bb:af:e4:42:31:69:11:fd:ee:86:d4:7c:43:ad:b4:
34:19:32:b6:6a:11:c5:06:fa:22:a7:25:35:92:df:
21:c0:10:95:f0:07:e3:a8:9b:25:bf:fa:8f:d7:e0:
a9:b4:e5:ef:ba:01:04:5c:77:38:6e:2a:00:bb:2b:
60:a3:b9:95:76:c3:3b:55:57:99:1c:e6:f2:26:91:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:51:8C:D9:27:63:68:FC:E1:CC:13:A2:6A:3B:B0:32:05:E0:60:41
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:ba:a3:9a:db:38:5e:3d:8e:e4:57:30:ad:94:c6:2d:c3:
30:d5:ca:76:94:63:d0:d8:62:a9:47:87:58:8d:68:83:be:36:
a3:a2:ff:a8:a6:e3:75:1a:2e:4a:a9:68:ea:f7:f3:cc:5e:0a:
48:63:75:f1:eb:ef:1f:2d:db:ad:8e:2e:5a:2e:06:89:1b:f6:
38:cd:7f:bc:9a:9f:cb:15:88:c5:d2:cb:a9:a1:9f:b1:fe:9a:
f4:1b:9b:b4:1e:bb:a6:5f:29:fc:e7:3d:c8:88:11:70:cf:5c:
02:46:42:8a:68:e7:90:ba:13:b4:75:80:8f:ad:a6:29:21:9a:
cc:6d:79:e5:85:5b:dc:ea:37:bd:8d:da:84:07:3c:fe:f2:67:
96:1f:26:3f:69:3e:60:d5:f6:0b:fc:16:75:4f:0a:79:d4:30:
bc:21:51:50:83:66:49:dc:47:6d:7d:dd:82:3a:8f:bb:2e:a5:
e6:0f:dc:dd:23:5e:c3:95:34:9c:5f:e4:e7:64:8d:06:83:88:
71:e7:38:1c:16:60:de:64:6b:aa:1b:ef:d4:75:f2:7f:88:79:
74:a7:75:02:a9:1f:75:a9:aa:d7:ec:4a:49:da:0b:01:9b:56:
95:75:5b:7a:0d:e2:b1:49:10:f4:b4:ff:a7:ea:f1:12:d9:3e:
82:f1:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:19 2025 by rpki-client