Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: 8TBuEnqAx8F+8iSSzd3CMnTvRhhCiFOIXwAGlMicTrE=
Subject key identifier: 72:E3:8B:05:99:08:91:7F:AD:A6:49:96:04:B9:F7:A6:10:B6:92:18
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 019A4F62649E0B90B9F5CEFD382BDC00CF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 04FF
Signing time: Tue 04 Nov 2025 15:00:39 +0000
Manifest this update: Tue 04 Nov 2025 15:00:39 +0000
Manifest next update: Wed 05 Nov 2025 15:00:39 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: Svl5E0yrlGzfFObgqKfzRRID6mo450qf24rVAJKwv/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:64:9e:0b:90:b9:f5:ce:fd:38:2b:dc:00:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Nov 4 15:00:39 2025 GMT
Not After : Nov 5 15:00:39 2025 GMT
Subject: CN=72e38b059908917fada6499604b9f7a610b69218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:81:69:0b:ca:05:4f:28:12:2a:3f:d7:5c:
57:5f:d6:a4:cc:e7:af:cc:40:eb:dd:b7:ae:9b:a2:
a4:37:fa:51:f9:91:4e:62:16:c2:f9:68:ea:4c:85:
b4:6a:2f:9a:96:c6:ef:81:38:10:73:2c:a5:f8:4c:
c3:ef:75:ac:d8:82:b5:75:fb:ec:5c:c4:ea:93:c6:
bc:82:b8:b3:8b:3b:19:eb:95:af:cf:a0:46:85:30:
7d:1f:c1:55:f6:e3:c4:db:a7:66:50:b2:17:b0:60:
6b:0d:af:37:64:2e:7a:cb:f7:1a:8d:d4:f7:b0:25:
f4:21:b4:4f:db:32:cd:53:13:fd:e5:ce:ae:09:4e:
ea:f7:1d:ff:37:b5:9a:ef:20:d8:e9:b4:88:6f:07:
7d:f0:48:df:72:ed:d7:57:5c:17:f4:1e:68:8d:12:
c5:9a:26:8b:06:d1:50:30:1a:e5:11:d9:2f:e4:80:
6a:91:d9:cb:11:7a:67:47:df:a0:6d:3e:a2:32:6c:
b6:ff:c6:3c:b3:f0:19:1b:28:46:fa:89:84:8d:7e:
5e:9f:a6:52:3b:52:a1:76:4b:b4:f5:a4:50:c0:38:
57:0a:75:b8:a4:af:5b:e2:21:80:7b:c2:ca:9a:27:
d7:5d:8e:02:c2:e2:cb:7c:11:30:aa:79:9b:cf:47:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:8B:05:99:08:91:7F:AD:A6:49:96:04:B9:F7:A6:10:B6:92:18
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:56:ac:aa:d0:a6:01:af:29:02:ef:ed:39:6e:52:a1:7b:c2:
84:44:96:40:a0:e3:78:36:b3:e3:ed:dd:02:a1:53:9b:53:f4:
d0:fc:4c:dc:64:2e:48:84:62:f5:19:82:23:cf:3d:b4:9d:09:
27:0a:67:91:52:9a:e0:97:89:e5:d2:8e:e2:a5:66:fb:c1:c3:
30:88:7b:6e:96:68:e1:6f:93:80:3c:9e:45:d1:b0:be:ad:c5:
84:e5:ce:ec:65:82:45:fb:7f:0e:be:57:df:6b:1a:fd:6e:27:
98:87:99:88:3b:f4:2a:e9:d8:96:17:38:7e:90:6c:1d:f2:50:
27:c0:e8:eb:19:e0:fa:5f:5c:7f:e7:53:43:98:85:93:59:42:
73:06:1a:35:4d:2a:49:de:ea:ad:53:dd:95:d6:ac:49:98:1d:
12:d3:2d:3d:4c:6e:d2:ef:78:df:24:31:47:0f:80:57:55:c8:
be:79:b3:5f:0a:81:9f:4d:cc:11:a0:5f:8e:1e:fe:28:45:53:
31:2d:e3:19:1e:33:16:db:83:05:e9:81:bb:b7:f0:68:20:b3:
69:55:61:2f:3f:a3:bd:08:a4:c0:5b:11:6a:58:79:6f:58:4a:
42:b5:e0:f5:bd:7a:f0:24:7f:8a:ca:41:a3:92:c9:67:b5:4d:
e7:a1:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:46 2025 by rpki-client