Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File: kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier: DPRXIiQ3cIDjFvcuVFyY7fdzxXsBuNp1NwNHT1MsAMo=
Subject key identifier: 8E:FC:5C:A6:C5:6D:F3:90:4B:BB:04:D1:93:2A:C6:EA:6E:D7:40:D7
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer: /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial: 019A4F98F4B3E1533B1FB41250B898E04D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 16:00:15 +0000
Manifest this update: Tue 04 Nov 2025 16:00:15 +0000
Manifest next update: Wed 05 Nov 2025 16:00:15 +0000
Files and hashes: 1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: snQKSZ8osPcW57kDmNE9bvSVLXffb3f/1L6qrCnCIAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f4:b3:e1:53:3b:1f:b4:12:50:b8:98:e0:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
Validity
Not Before: Nov 4 16:00:15 2025 GMT
Not After : Nov 5 16:00:15 2025 GMT
Subject: CN=8efc5ca6c56df3904bbb04d1932ac6ea6ed740d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:60:19:67:4e:5b:67:86:88:9c:76:77:87:
14:94:d0:e9:18:b2:ad:60:c7:d9:21:99:56:04:07:
36:2f:4b:09:ca:80:f4:0a:e1:64:f3:d0:bd:0f:1a:
34:b9:d2:c6:5a:5b:5b:42:d9:43:a4:80:4a:4b:3c:
45:78:7e:01:9a:0b:de:bb:22:71:1b:9b:03:27:2d:
fd:ab:e9:9e:22:18:29:10:9a:4f:e1:73:9d:96:5f:
de:b4:44:06:31:79:5d:08:e1:55:fa:ab:d3:5b:98:
5e:89:83:38:05:79:b2:c4:62:07:61:7b:eb:ff:ec:
4f:c0:b2:c2:06:c4:20:f2:6a:81:54:f2:b9:1a:af:
a9:87:da:e4:59:d6:05:4a:cf:6d:89:8f:12:b8:27:
8b:2f:e9:cb:f0:e9:99:74:d9:2a:0b:f0:ab:2c:fe:
df:12:fb:a2:6f:a0:16:3d:e7:86:56:c5:68:62:3b:
1b:eb:d9:cf:21:86:6f:84:9f:1a:2a:7c:9e:51:f0:
8b:b0:83:9f:b9:03:28:c5:9b:de:41:6f:40:87:40:
2c:97:29:a6:c1:21:46:71:8c:e3:51:08:90:a3:5b:
76:4a:29:3a:e8:c6:d1:15:26:2b:a1:5b:15:99:fa:
56:86:d9:79:de:f0:d5:49:2b:52:9c:ad:31:86:9f:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:5C:A6:C5:6D:F3:90:4B:BB:04:D1:93:2A:C6:EA:6E:D7:40:D7
X509v3 Authority Key Identifier:
keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:6f:35:0c:ae:97:d2:fd:25:58:96:9a:4e:2c:17:93:31:
02:8b:ca:38:36:e2:01:ad:e3:76:6d:20:09:fb:c8:d6:fa:3e:
52:18:86:6d:22:67:19:d6:f4:bb:c1:0f:44:6a:f9:b9:49:72:
a7:23:f9:a7:ee:49:42:f1:dd:2d:f8:90:0d:20:45:21:87:20:
c9:29:cc:da:d7:f9:4f:e6:de:23:e8:bc:82:a2:3c:3c:38:53:
e7:a3:b6:53:6b:46:f3:a5:66:3a:00:d2:a1:59:75:aa:08:e8:
c2:59:40:98:b9:d1:e7:ff:83:fa:aa:f2:9f:ef:fd:2f:79:aa:
1a:2c:86:12:20:c0:d1:48:59:45:3b:94:16:ab:70:86:ef:3a:
46:67:05:2f:4d:46:c0:21:05:cc:b8:5d:63:d3:df:86:cd:42:
04:a0:9e:4a:e3:9a:bb:fc:ef:2c:55:b3:31:53:66:8e:b2:fc:
bb:4a:f0:e8:c1:6b:b7:1e:86:3b:d4:04:22:7f:c9:0b:de:f9:
1f:cc:7d:d4:84:8a:e7:c8:1a:1c:27:4c:29:d1:38:db:af:11:
08:40:44:3f:35:94:6d:d5:7e:2f:4f:23:54:41:70:d4:e9:c3:
6d:cf:8e:46:33:94:a2:ca:16:b0:a5:bc:dc:14:52:21:8d:a3:
50:94:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:39 2025 by rpki-client