Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: MFoZgVfpFyvZYxZ93o3Pw7Yrf8iUoEdUucXYUawQFgk=
Subject key identifier: F7:3F:83:95:E8:9D:CF:FE:16:AB:E3:45:95:56:7E:E7:0A:8B:18:12
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 019A53083AB64DA9B734389D8C579265D14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 0591
Signing time: Wed 05 Nov 2025 08:00:39 +0000
Manifest this update: Wed 05 Nov 2025 08:00:39 +0000
Manifest next update: Thu 06 Nov 2025 08:00:39 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: wf5mINO/jhm67DL7qlIFplKcfoSKKF8wAHy32VBcMdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:3a:b6:4d:a9:b7:34:38:9d:8c:57:92:65:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Nov 5 08:00:39 2025 GMT
Not After : Nov 6 08:00:39 2025 GMT
Subject: CN=f73f8395e89dcffe16abe34595567ee70a8b1812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:a3:b2:6b:12:1b:d0:82:26:20:dd:8c:42:
13:4d:2c:f3:13:75:3a:df:aa:0f:2a:d0:0a:9a:02:
9d:bf:49:fd:e2:f7:46:7a:c5:24:b9:f9:48:ab:ff:
69:53:9e:8b:7a:bf:2e:dd:01:5e:b6:41:43:3d:87:
10:13:15:b7:41:18:3e:28:1c:4c:ea:6f:2f:26:0c:
9c:16:69:27:98:6e:89:6d:c3:dd:97:a9:28:66:f5:
1a:94:c3:c3:6b:77:e5:03:f4:cd:d6:97:54:54:51:
7a:a5:44:bd:11:84:42:2f:43:af:98:ae:46:2b:57:
73:a2:9d:a6:7e:86:a7:3f:d7:72:24:cf:2b:9f:1f:
19:33:26:d5:9e:e1:01:82:56:c5:9e:3e:a7:42:8a:
0b:f7:ce:0a:6d:d8:b5:00:95:d7:71:79:d7:5a:3a:
b9:bb:d8:84:aa:a7:cc:75:59:a8:73:9a:61:f8:b5:
3a:53:c4:ab:ae:44:d0:75:8d:d0:7d:b9:5e:13:8f:
26:f1:9e:9f:c9:1b:7f:33:16:f7:08:85:a3:d5:f2:
83:08:10:17:f2:3c:51:78:68:a0:82:3a:65:e8:83:
2e:b8:b6:2a:43:11:84:02:56:e9:c7:c1:d2:2c:b3:
6d:13:ef:78:2f:d8:52:b2:64:4e:bc:6c:1d:bd:91:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:83:95:E8:9D:CF:FE:16:AB:E3:45:95:56:7E:E7:0A:8B:18:12
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:e9:cd:c6:a4:8c:c7:58:f5:a0:ac:2c:cd:c1:ea:79:e7:
78:e7:63:4f:b6:7f:3b:33:51:0a:53:b2:b3:4f:76:04:ab:f1:
6b:e0:fd:9b:ce:f0:2f:bb:57:2b:e3:22:94:2d:ba:58:ea:a1:
7b:8d:dc:ac:99:36:1a:91:c2:06:01:dc:ab:41:91:0a:ff:07:
11:b6:3b:27:ec:90:81:d8:3e:01:37:c1:05:24:c4:11:a7:31:
4e:28:34:29:13:68:3f:4d:06:09:79:27:65:22:ac:c5:b3:a7:
30:87:cc:b8:56:44:06:de:ee:a5:03:f1:a5:fe:c3:74:38:f4:
6f:24:b6:96:1a:e9:9a:b2:18:03:12:27:78:1e:29:ed:75:9c:
0a:c7:07:46:c4:2f:f2:bf:d1:1f:38:6f:11:ef:91:6a:9d:a9:
2e:85:3d:5d:0f:15:cc:cd:0b:f1:10:b6:1b:38:23:bf:ab:fc:
62:94:4e:c4:eb:d0:a8:67:77:3b:e4:81:9c:ad:f8:0e:04:a2:
c7:07:ac:51:77:fd:45:cf:68:eb:3c:2e:5c:e8:f1:c0:1e:d2:
f6:c2:2e:34:4a:45:9d:a6:43:b6:4f:fa:73:63:1a:92:26:b9:
34:c0:d2:19:a6:d4:52:be:4a:bd:7a:f7:ff:86:4f:b9:92:b7:
70:35:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:50 2025 by rpki-client