Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: FTpNq8F/tW9Y2fXtpA31uAkdD9LDM6PscBOnDnmNFCM=
Subject key identifier: E9:31:93:88:72:26:FE:28:CE:2A:D5:D4:C8:B9:54:42:FC:4F:04:93
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019A4EF44D083D8D5D839D008B917BE86FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0DD9
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 2w0uDb4kKvdXitLHrXGoroo4F3MIV8qa/Qo4nXixLZA=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4d:08:3d:8d:5d:83:9d:00:8b:91:7b:e8:6f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=e93193887226fe28ce2ad5d4c8b95442fc4f0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:10:7e:1e:8c:3e:c0:7d:55:18:80:21:2c:
41:8f:81:23:f4:18:8a:85:b9:9a:5f:23:23:e4:5e:
35:2a:53:51:f8:50:2e:12:26:0a:73:9b:ad:80:34:
2b:4b:4a:2f:8b:c4:c6:9f:b3:a4:06:da:e0:b5:f0:
4c:8a:5b:ce:3d:a3:ec:ee:a7:33:34:35:d2:75:01:
bc:27:a8:b8:9c:fb:a5:e6:f1:1f:30:99:79:40:31:
29:47:8d:e5:48:eb:42:49:3b:c9:89:63:d0:b1:9a:
14:12:ae:b1:3b:9d:30:2b:e2:19:f5:e9:60:57:4a:
c1:35:1c:ac:82:62:c5:25:04:1d:99:ac:d1:bc:4b:
24:eb:e6:e2:51:b1:b2:62:23:4b:ad:cd:37:30:78:
61:7e:4c:a5:4d:91:f4:ef:6f:fc:02:c7:0e:d1:5f:
db:db:6c:f3:34:1e:6e:2a:17:78:ae:d3:d1:72:da:
00:fc:6a:4d:4b:dd:c4:98:52:e3:47:82:43:a5:aa:
a4:67:a2:d8:96:d2:b9:a0:db:21:1e:a0:66:79:58:
ef:9e:ce:d9:0c:79:ed:5f:1b:b6:03:d1:4c:d2:df:
bb:48:14:0a:32:9a:3a:5a:0b:51:aa:01:65:b0:e0:
62:0c:29:48:d3:da:56:b9:5a:16:ef:15:8d:d8:0b:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:93:88:72:26:FE:28:CE:2A:D5:D4:C8:B9:54:42:FC:4F:04:93
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:0f:99:02:63:63:04:f2:33:a8:1f:a8:19:26:1e:0b:77:
a9:20:c7:2b:81:d9:82:43:b0:54:99:c6:64:02:cc:3c:ae:5a:
b8:71:d0:82:e0:c0:28:1d:a7:91:cf:04:c5:44:e6:4a:78:0e:
e6:ac:43:fd:7e:d5:7b:18:02:d4:9f:f5:d7:43:ff:ef:40:37:
49:10:0e:5d:be:6e:9a:4c:c9:05:e3:b9:ef:67:89:84:6a:e0:
64:6a:65:d5:33:48:e8:b7:43:68:c1:c3:95:03:d9:5b:23:75:
0e:1d:1b:51:4e:c3:15:58:35:cd:45:98:60:dd:3e:40:c0:a6:
a5:48:ea:ec:d1:44:4d:9a:7e:31:54:c0:16:18:16:38:9d:b0:
7b:c2:c9:68:30:cc:ed:42:1d:37:0d:93:36:54:6e:9d:fc:9a:
3a:7d:aa:51:c7:6e:1f:ee:4b:f5:0a:e3:2f:ed:4f:c7:72:e8:
af:ae:c6:85:c5:49:49:c7:d2:72:ae:02:ef:2f:24:49:13:e7:
1c:bd:fe:b7:ed:23:94:b2:fd:e8:4c:bf:91:2e:5e:23:05:98:
2d:31:2f:62:5b:cb:74:04:ff:bf:bf:64:cc:34:ce:36:ab:65:
a6:c4:18:58:c0:7b:a9:db:08:16:56:c4:eb:85:80:f5:d3:95:
57:9d:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:33 2025 by rpki-client