Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: bgZJZTjS7APrB0J9KKdyqvouJ/mhmijwEQpCHhUzcRY=
Subject key identifier: C6:BE:9A:ED:99:88:04:31:D5:2B:EA:90:25:63:6B:01:51:6A:01:46
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 019A52D1BB7D979C9A9084F496BDEFFD9137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:01:08 +0000
Manifest this update: Wed 05 Nov 2025 07:01:08 +0000
Manifest next update: Thu 06 Nov 2025 07:01:08 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: EdJs4MAnYRUx3kUw2JOse3zwGUk3aDAjMhOzhL96NeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:bb:7d:97:9c:9a:90:84:f4:96:bd:ef:fd:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Nov 5 07:01:08 2025 GMT
Not After : Nov 6 07:01:08 2025 GMT
Subject: CN=c6be9aed99880431d52bea9025636b01516a0146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:aa:46:f6:37:7c:12:07:b3:68:63:97:58:
67:3f:80:de:89:d0:79:17:fb:25:dc:85:40:ff:c9:
60:65:cb:09:30:03:c7:c2:53:9b:82:36:ff:e6:19:
fd:1e:3d:fa:e1:ea:ac:dd:d6:fb:06:33:76:97:5d:
6a:b4:73:14:9a:e3:26:53:73:2d:c7:1b:d3:e0:40:
30:9d:01:78:0b:3a:38:4a:8a:ed:ab:22:d0:2c:c0:
9e:ca:3e:d4:35:32:b0:44:9e:84:42:35:ed:d4:91:
b3:a1:19:4b:8e:0d:de:e7:30:cc:d1:1c:2d:ef:8a:
fa:52:ec:59:78:b1:10:fc:0b:95:a9:80:31:c8:83:
26:ee:f0:94:a0:cc:91:b2:3d:33:f3:a2:a0:94:00:
a1:3f:d5:be:1c:9e:7e:b5:98:5b:d1:af:9f:21:e3:
2b:34:f6:94:f6:9f:4a:28:ab:7a:b2:30:4f:c8:b1:
26:83:a4:80:b2:b3:c2:25:47:26:70:c6:a2:90:5c:
45:ed:9c:e8:33:f7:dd:73:3b:5e:dc:e5:6c:b9:9c:
b1:5c:a5:b1:62:3a:96:e2:5b:74:64:ba:f2:35:67:
66:52:86:f7:eb:aa:50:22:5c:d8:cc:a8:8b:f0:b5:
6b:64:6e:ba:de:9b:dd:8f:ba:ec:02:4d:a3:0e:50:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:9A:ED:99:88:04:31:D5:2B:EA:90:25:63:6B:01:51:6A:01:46
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:65:7a:9b:3c:1a:10:c1:11:4a:81:66:3e:e0:14:70:27:
a3:9e:35:93:64:ac:e6:29:a8:26:f6:a2:60:1d:11:cc:ab:a7:
58:e3:7f:65:f8:d2:25:ff:b0:63:a4:bd:d7:ef:c3:6a:fc:2f:
2a:a6:39:94:b8:d0:75:39:2e:5e:fb:00:50:ca:75:a8:78:9e:
28:72:9b:69:60:78:6f:86:c8:22:14:58:8c:78:99:cf:5d:66:
8e:15:d5:26:14:04:87:21:93:05:d0:e4:bc:57:65:be:05:0e:
0a:3b:3c:61:76:27:25:05:de:61:d9:63:7b:3b:54:17:a1:83:
7b:7d:31:40:b0:69:ec:7a:61:06:f5:93:10:da:45:b9:f6:8b:
d1:57:f0:7f:a8:42:c7:51:08:d3:ea:80:ff:cb:fe:00:22:8e:
42:6f:82:96:35:dc:bd:c8:e5:33:c8:26:28:dd:30:c5:38:25:
6d:fe:cc:e2:c9:f6:6b:20:3f:5a:cc:4e:48:28:3f:4e:a9:5b:
ae:0c:78:99:e7:c3:49:33:c0:c4:11:a9:7f:14:45:3f:5e:73:
4b:58:0d:1a:94:b6:9a:4b:40:fb:db:c3:f4:65:b9:bb:8f:1f:
77:a3:d5:8d:d5:01:26:76:cc:41:d6:66:a9:28:14:d0:fa:01:
7a:11:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:23 2025 by rpki-client